CN1392699A

CN1392699A - Data transmission system and device, recorder, edition control and processing method

Info

Publication number: CN1392699A
Application number: CN02128228A
Authority: CN
Inventors: 阿部三树; 细井隆史; 松田宽美; 田中理生
Original assignee: Sony Corp
Current assignee: Sony Corp
Priority date: 2001-06-13
Filing date: 2002-06-13
Publication date: 2003-01-22
Anticipated expiration: 2022-06-13
Also published as: US7191346B2; AU4750902A; JP2002373470A; EP1267344A3; US20030031319A1; EP1267344A2; EP1267344B1; MY141541A; CN100355234C; TW571548B; KR20030001259A; AU784284B2; KR100936847B1; JP3861625B2

Abstract

Disclosed is a method for causing either first content data transferred encrypted from a data transfer apparatus or second content data which are input unencrypted to be selectively recorded to a storage medium in a data recording apparatus. Given a command for editing the content data recorded on the storage medium, editing of the recorded data is inhibited or restricted if the data are judged to be the encrypted first content data. When the data recording apparatus is to return the encrypted first content data from the storage medium to the data transfer apparatus, the return of the first' content data is inhibited if the data are judged to have been edited. Upon return of the encrypted first content data to the data transfer apparatus, a content ID held by the data recording apparatus regarding the first content data is matched against a content ID held by the data transfer apparatus regarding the same data. Where the encrypted first content data are known to have been edited, the content ID matching process is omitted.

Description

Data communication system and device, tape deck, editor's control and processing method

Technical field

The present invention relates to a kind of data communication system, a kind of data link, a kind of data recording equipment, a kind of editing control method and be used to transmit and write down a kind of data processing method such as the content-data of music data.

Background technology

Have a kind of scheme, comprise that a hard drive (HDD) of people's computer is used as a main storage medium one by one, write down the content-data such as music data thereon, the content-data of record is transmitted and is recorded to another storage medium (second storage medium just) subsequently, and being reproduced at last such as music of from then on writing down in the media is used for amusement.Content-data in this article refers to those distribution, that transmit and/or main use, such as music data, video data, game data and computer software.

According to top scheme, HDD can hold from the content-data such as music data of package media regeneration, package media comprises CD-DA (optical disc digital audio frequency) and DVD (Digital video disc), perhaps from outside music servers through a communication network to connected personal computer downloaded contents data.The user can connect the second storage medium tape deck to personal computer so that by appurtenances content-data from HDD copy or move to second storage medium.The user can utilize and regenerate from the media of the player of packing into content-data such as music of one of the second storage medium compatibility suitable player.

Second storage medium can be any all kinds of memory, comprises the storage card of based semiconductor memory, such as flash memory, and magneto optical disk (for example mini disk), CD-R (can write down CD), CD-RW (can write CD), DVD-RAM, DVD-R, and DVD-RW.

Now, the register and the players of noting down of working as acceptable and these storage medium compatibilities have been obtained at large with regenerating unit.The various forms that occurs and the parts of type comprise desk-top and portable type.According to their taste and the hardware that they have had, the user can select any such parts to be used for the record and the regeneration of content-data.

Use and the enjoy content data according to top scheme or with similar form, must consider the copyright of content-data.Example, the user can accumulate on their HDD from content-data distribution service or the content-data that obtains from the package media of independent purchase, and the data that can ad infinitum copy accumulation are to second medium.In the case, can not sufficiently protect the copyright holder's of related content data interests.Proposed many suggestions and prevented, and advised being used to protect processing rule with the content-data of digital data form with this potential of various Technical arrangements or the abuse that exists.A kind of such suggestion is known as SDMI (Secure Digital Music Initiative initiative (Secure Digital Music Initiative)).

The back will be described by SDMI predetermined data path.SDMI provides rule, with transmission and the record of copyright protection control and management from main storage medium (being the HDD the personal computer) to the legal content-data of second medium, and considers the interests right of the copy of individual use (promptly to) of domestic consumer.The content-data of the accumulation on HDD falls into two kinds of classifications widely: for example from an external server through the content-data of network allocation (below be called Web content), with regeneration and from such as the content-data that reads in the package medias such as CD-ROM, CD-DA the suitable disk drive of packing into and DVD, this disk drive is incorporated into or the outside appends on the personal computer.

SDMI has stipulated concrete technology; (for example be transmitted and copy to second storage medium at the content-data of being concerned about from main storage medium (being HDD); a mini disk or a storage card) before, need to observe copyright protection and the private protection of using the copy right.The detail of some of them is discussed below.

According to SDMI, content-data is sent to second storage medium that adapts to SDMI from main storage medium, such as the storage card based on the semiconductor memory that comprises flash memory.Because content-data is recorded to and is accumulated on the main storage medium such as HDD with the form of encrypting in a SDMI is provided with, then the data from there to the copy of second storage medium do not change (promptly still encrypting).A regenerating unit that is loaded into second storage medium that is used for resetting is equipped with a decipher function, and the content-data of permission copy is reproduced from the state of their encryption.

Arrange each to adapt to the part of second storage medium of SDMI, as the zone of writing down the content ID of the content-data of identification record on media thereon with its form.Each content data item that goes up accumulation for the main storage medium in its host part (HDD) produces a content ID, and each content ID is stored on the media relevant with applicable content data item.When a given content data item is copied into second storage medium, also be recorded to second storage medium corresponding to the content ID of described content data item.

Content ID is used to the so-called content rights management on the main storage medium end and the second storage medium end.On the main storage medium end, content rights refers to transmit the right of (i.e. copy) content-data to second storage medium; On the second storage medium end, content rights represent the to regenerate right of content-data of copy.In description subsequently, the transmission of the content-data from main storage medium to second storage medium (transmission of right) will be called as " detecting ", and the returning (actual is returning of right) and will be called as " (check-in) checks in " of the content-data from second storage medium to main storage medium.

SDMI is defined in to detect and check in to transmit and goes up service regeulations.Be detected when for example, allowing a single content data item three times (just have three and transmit right) from main storage medium to second storage medium.Once detect main storage medium, content data item has its right to be sent to the second storage medium end.In other words, described content data item also has two remaining transmission rights on the main storage medium end; In order, the second storage medium end obtains one for the content regeneration right.If checked in a content data item from second storage medium to main storage medium, the right of content-data is considered and returns.That is to say that the second storage medium end has lost the regeneration right of the content-data that returns, the main storage medium end recovers a transmission right of described content-data simultaneously.

Use applicable content ID on each content data item, to finish such checking in/detect management.According to detecting, content data item of being concerned about and its content ID are recorded to second storage medium.This can make the second storage medium end described content-data (promptly obtain regeneration right) of regenerating.On the main storage medium end, according to service regeulations, one of content-data transmits right and is reduced (i.e. a content ID be considered transmission).According to checking in, in fact content data item is not returned but is deleted from second storage medium.On the main storage medium end, a content ID is considered and returns, and according to rule, one is transmitted right and is added in the described content-data; The second storage medium end has lost the regeneration right of the content data item of deletion.

When content-data was checked in and is detected, second storage medium that adapts to SDMI was subjected to content rights management in above-mentioned summary mode, so that be copied and be recorded with their encryption format.Such management is intended to provide copyright protection, by preventing unconfined reproduced content data, guarantees to be used for the private user's who uses copy right simultaneously.

The content-data that downloads to as the HDD of main storage medium from external server uses content key CK encrypted intuitively.For purpose of description in this specification, the content-data with the encryption format record on HDD is to use content key CK to be compressed into the content-data A3D of every ATRAC3 standard (perhaps passing through any other suitable compression scheme) by hypothesis.

In this specification, a data item y who encrypts with key x be expressed as E (x, y).When use key x decipher this encrypted data item E (x, in the time of y), the decrypted data item is expressed as D{x, E (x, y) }.For example, if represent the ATRAC3 data compressed by above-mentioned A3D, then with a content key KC content data encrypted A3D be expressed as E (CK, A3D).When use ciphering key K decipher this ciphered data (ECK, in the time of A3D), decrypted data is expressed as D{CK, E (CK, A3D) }.

On the HDD as main storage medium, (CK, A3D) encrypted content key CK (is that E (KR, CK)) together stores to content-data E with using root key KR.But example, (KR, CK) (CK A3D) is downloaded the content key E of encryption together together with content data encrypted E from an external server.For the data that are sent to second storage medium, from send as the HDD of main storage medium content data encrypted E (CK, A3D) and the content key E that encrypts (KR, CK).

Parts on the second storage medium end are had root key KR by hypothesis.Use root key KR, parts decrypted content keys CK also deciphers this content data encrypted by the content key CK that seeks help from deciphering.

Root key KR can be changed with copyright holder's wish and/or according to environment.Can set up a different root key KR to each different content data item.As describing in detail in the back, SDMI stipulates a function, is used for the destination of handling the content-data that retrains distribution by suitable root key KR.

Can be used for the destination binding function with a kind of preferably the setting, so-called EKB data (enabling key block) are assigned to the destination terminal, so that the legal terminal of designated content-data can be utilized EKB checking root key.In this is provided with, in order on HDD, to store, distribute EKB from server together with the content key of content data encrypted and encryption.

Suppose mini disk now, a magneto optical disk extensively is accepted now, is taken as second storage medium.Mini disk recording-member that adapts to SDMI with the content-data that detects with they encrypted state E (CK, A3D) be recorded in loading mini disk wherein in.When regeneration, before the data that suitable decoding is used to regenerate, a compact disc player that adapts to SDMI is at first by a decryption processing D{CK, E (CK, A3D) }=and A3D, from the dish that loads, obtain ATRAC3 data (A3D), export again by the music of data reproduction or other signal source.

Today, general mini disk system was not designed in the data of recording of encrypted on the mini disk.In other words, when the operation compact disc player, these mini disk systems do not have decipher function.As a result of, though the mini disk recording-member that adapts to by SDMI content data recording to a mini disk, many non-adaptation compact disc player can not be from coiling the reproducing contents data.Between two types parts, there is not compatibility for data reproduction.This legal use for the SDMI content-data of being bought by domestic consumer has proposed great constraint, and can reduce value widely and be used for the satisfaction degree that the SDMI content provides business in the eye of domestic consumer.

Be sent at content-data before the mini disk recording-member of a non-adaptation SDMI, top problem can be prevented intuitively by deciphering SDMI content-data, so that a copy of data can be recorded on the mini disk or any other the second suitable storage medium with the form of deciphering.Yet this measure can impel unrestriced copied content data and cause bootlegging in the reality.This has just lost the initial purpose of protection SDMI copyright.

As a method that transmits content-data, the applicant had before advised following method: according to the content-data that transmits, a data link (merging main storage medium) checking is as the data recording equipment (handling second storage medium) that transmits the destination.Data link is given his or her permission according to the condition of the data recording equipment that is verified and the content provider (for example copyright holder) who relates to, the transmission of approval content-data.Content-data then is transmitted with encrypted format on transmission line.The content-data that transmits is decrypted and be recorded to second storage medium.Thereby the method for suggestion is intended to tolerate the unencrypted copy of content-data and is convenient to user's interests, guarantees copyright protection simultaneously.

Said method by this application people suggestion is out of use, and it has following shortcoming: as second storage medium, when the SDMI content-data was checked in or detects, generally accepted now mini disk can not recorded content ID.Mini disk does not have the zone of recorded content ID therein, and the mini disk register on the market is not used in the function of organize content ID up to now.

Can set up a new zone, be used for illustrative controlled area (U-TOC) on mini disk and hold content ID.Even so, in case by the mini disk register by the record or editing and updating U-TOC, all the elements ID that is recorded in the new range of distribution then loses.Can not organize content ID at the mini disk end, keeping user's interests with the compatible type of existing equipment simultaneously.There is not Capacity Management content ID to mean to control transmission checking in wherein.

At the second storage medium end,, can produce a content ID intuitively based on by content ID content identified data item itself such as mini disk.Problem is the cost processing time, because need seek on disk to read the part of described content-data.This content ID, even produce at the second storage medium end, the purpose that can not be used to manage is because the content ID on they and the main storage medium end is inconsistent.

And, carry out various types of editors on the content-data that storage mediums such as mini disk allow to write down therein.Know as us, mini disk allows the content data item (being commonly referred to track, is the data cell of expression music or other signal sources) of its record to be divided, and merges deletion, or mobile (orbit number moves).

If HDD is divided to the content-data that detects of mini disk, the combination or by other forms of editor, they will become with remain on HDD on the different data of original contents data.This has obviously hindered wherein returning of the original contents data of basis from second storage medium to main storage medium, and the regeneration right of content-data will be resumed the function that checks in.If produce content ID, then divide, make up or different content ID that other content of edit will cause this to be produced based on the content corresponding data.As an additional problem of considering, no matter detect transmission, mini disk also can carry a specific content, writes down this content by each recording-member of handling described dish.

According to these situations, the user utilizes mini disk or other recordable or editable storage medium not to rely on the system that a SDMI adapts to as each SDMI standard, on the one hand, before can obtaining consistency between record or editor's the normal procedure, want removing obstacles, on the other hand, the transmission that detects and check in according to the SDMI scheme.

Summary of the invention

Situation has been finished the present invention in view of the above, and data communication system, data link, data recording equipment, editing control method and data processing method are provided, have been used for managing aptly the editor of the content-data between second storage medium of main storage media and arrangement record unencrypted content-data with effective and efficient manner.

According to first aspect of the present invention, a kind of be used for receiving selectively first content-data of encryption or the data recording equipment of second content-data of unencrypted are provided, the data of this reception are recorded in the storage medium that is made of program area and management area, and this data recording equipment comprises:

Be used to receive first receiving-member of the first content data of this encryption;

Be used to receive second receiving-member of these unencrypted second content data;

The deciphering parts are used to decipher the first content data by this encryption of first receiving-member reception;

Recording-member, be used for writing down selectively the second content data that receive by the first content data of this deciphering parts deciphering or by second receiving-member program area to storage medium, this recording-member further writes down the management area of an identifier to this storage medium, the first content data of this deciphering of identifier identification record in the program area of this storage medium, perhaps the second content data that receive by second receiving-member; And

Control assembly is presented an order that is used for the content-data of reference record in the program area of this storage medium, and this control assembly allows or forbid the content-data of reference record according to the identifier in the directorial area that is recorded in this storage medium.

According to second aspect of the present invention, a kind of data recording equipment that is connected to the data link of the main storage media that is equipped with the first content data of holding encryption through communication line is provided, this data recording equipment is through the first content data of this communication line and this data link exchange encrypt, and this data recording equipment comprises:

First receiving-member is used to receive through the first content data of this communication line from this encryption of this data link transmission;

Second receiving-member is used to receive unencrypted second content data;

Recording-member, be used for writing down selectively the second content data that receive by the first content data of this deciphering parts deciphering or by second receiving-member program area to storage medium, this recording-member further writes down the directorial area of one first identifier to this storage medium, this first identifier identifies or is recorded in the first content data of deciphering in this program area of this storage medium, perhaps the second content data that received by second receiving-member;

The identifier production part is used for producing second identifier based on the first content data division of this encryption;

Transmit block is used for sending second identifier that produced by this identifier production part to this data link through this communication line;

The change parts are edited if be recorded in the first content data of this deciphering in this program area of this storage medium, so first identifier of change record in this directorial area of this storage medium; And

Control assembly, to turn back to this data link if be recorded in the first content data of this deciphering in this program area of this storage medium, so according to the matching result between second identifier that keeps by this data link and second identifier that keeps by this data recording equipment, allow or forbid the returning of first content data of this deciphering; Wherein, if being judged as, the first content data of this deciphering of returning edit, this control assembly is not according to the result of this coupling so, but abides by first identifier in the directorial area that is recorded in this storage medium, allow or forbid the first content data this return.

According to the 3rd aspect of the present invention, a kind of data link that is connected to data recording equipment through communication line is provided, be used for receiving selectively the first content data or the unencrypted second content data of encryption, this data link exchanges the first content data of this encryption through this communication line and this data recording equipment, and this data link comprises:

First storage component is used to store the first content data of this encryption;

Transmit block is used for sending the first content data of this encryption to this data link through this communication line from first storage component;

Receiving-member is used to receive the content designator that sends from this data recording equipment, perhaps at least one the first content data of this encryption of returning from this data recording equipment;

Second storage component is used to store this content designator that is received by this receiving-member;

Matching block, be used for when the first content data of this encryption are returned from this data recording equipment, make the content designator of this receiving-member reception corresponding to the first content data of this encryption, this matching block further mates the content designator of this reception with respect to the content designator that is stored in the second storage component; And

Control assembly is used for the result according to coupling, allows or forbids that the first content data of described encryption return from described data recording equipment.

According to the 4th aspect of the present invention, a kind of data communication system is provided, comprising:

A data link comprises the first storage component of the first content data that are used for storage encryption and is used for sending from first storage component the transmit block of the first content data of this encryption; And

A data tape deck comprises: first receiving-member that is used to receive the first content data of this encryption that this transmit block by this data link sends; Be used to decipher the deciphering parts of the first content data of this encryption that receives by this receiving-member; Be used to receive second receiving-member of unencrypted second content data; And being used for writing down selectively the unencrypted second content data that receive by the first content data of this deciphering parts deciphering or by this second receiving-member recording-member to the program area of storage medium, the identifier of this recording-member further record identification first content data or these second content data arrives the management area of this storage medium;

Wherein this data recording equipment also comprises:

The content designator production part is used for the first content data division based on this deciphering in the program area that is recorded in this storage medium, produces a content designator; And

Transmit block is used to send to this content designator that this data link is produced by this content designator production part; And

Wherein this data link also comprises;

Second storage component is used to store the content designator by this transmit block transmission of this data recording equipment;

Receiving-member will be when the first content data of described deciphering will return to described data link from the described storage medium of described data recording equipment, corresponding to the first content Data Receiving content designator that will return;

Matching block is used for this content designator that is received by this receiving-member with respect to this content designator coupling that is stored in second storage component; And

Control assembly is used for according to this matching result by matching block, allows or forbids that the first content data of described encryption return from described data recording equipment.

According to the 5th aspect of the present invention, a kind of editing control method is provided, be used for receiving selectively the first content data that when data link transmits, are transfused to encryption, perhaps import unencrypted second content data, give the program area of storage medium for the unencrypted data that write down this reception, write down a management area of giving described storage medium corresponding to the identifier of the content-data of this record simultaneously, described identifier sign first content data or second kind of content-data, this content-data that is recorded in whereby in the described program area of described storage medium is edited, and described editing control method may further comprise the steps:

This identifier from these management area regeneration sign first content data or second content data;

According to the identifier of this regeneration, provide an order that is used for reference record this content-data in described program area, the content-data of judging this record is first content data or second content data; And

If be judged at this determining step at this content-data of this program area of this storage medium editor is the first content data, then forbids or limits this editor.

According to the 6th aspect of the present invention, a kind of data processing method is provided, be used for through a communication line that connects two parts content data encrypted being exchanged between data link and data recording equipment, described data processing method may further comprise the steps:

When this data link sends this content data encrypted to this data recording equipment, make this data link go to receive one and produce by this data recording equipment and from the content designator of its transmission;

The content designator of this reception of storage in a memory;

When this data recording equipment will return this content data encrypted to this data link, judge whether that this content data encrypted that will return is edited;

If this content data encrypted is judged as at this determining step and edits, then forbid returning this content data encrypted;

If this content data encrypted is judged as at this determining step and is not edited, mate corresponding to this content designator that will return this content data encrypted with respect to this content designator of in this memory, storing; And

If this coupling in this coupling step shows coupling, allow to return this content data encrypted.

The summary accompanying drawing

Fig. 1 is used for the exemplary plot of a tree structure of the formation of encrypted secret key by one embodiment of the invention;

Fig. 2 A and 2B are the exemplary plot of the typical EKB (enabling key block) that is used to encrypt of embodiment;

Fig. 3 is the exemplary plot that typically enables key block (EKB) structure that is used to encrypt of embodiment;

Fig. 4 is a block diagram, has shown the exemplary systems structure of embodiment;

Fig. 5 is an exemplary plot of the typical data path that is used for the SDMI content-data of embodiment;

Fig. 6 is a block diagram that has been equipped with the parts of a main storage medium among the embodiment;

Fig. 7 is a block diagram of the second storage medium processing unit among the embodiment;

Fig. 8 is an exemplary plot of the form of trooping on the mini disk;

Fig. 9 A and 9B are exemplary plot describing a regional structure of mini disk;

Figure 10 is an exemplary plot that is used for the U-TOC sector 0 of a mini disk system;

Figure 11 is an exemplary plot of a link structure that is used for the U-TOC sector 0 of mini disk system;

Figure 12 constitutes the flow chart of steps that checking of embodiment is handled;

Figure 13 is an exemplary plot, example the content-data of embodiment how to be assigned with, transmission and encrypted;

Figure 14 A and 14B are exemplary plot, have shown how embodiment's finishes encryption with a device node key;

Figure 15 is an exemplary plot, has represented the how decryption content data of embodiment;

Figure 16 is the exemplary plot that detects control command that embodiment uses;

Figure 17 is the exemplary plot that detects response command that embodiment uses;

Figure 18 is the exemplary plot that writes down the object control command that embodiment uses;

Figure 19 is the exemplary plot that writes down the object response command that embodiment uses;

Figure 20 is an exemplary plot of the control command that checks in using of embodiment;

Figure 21 is an exemplary plot, has shown the details of " subfunction " data in the control command that checks in that embodiment uses;

Figure 22 is an exemplary plot of the response command that checks in using of embodiment;

Figure 23 is another exemplary plot of the response command that checks in that uses of embodiment;

Figure 24 is an exemplary plot of a dedicated registration control command using of embodiment;

Figure 25 is the special-purpose exemplary plot of nullifying control command that embodiment uses;

Figure 26 is a flow chart of steps during one of the formation of embodiment detects session;

Figure 27 is another flow chart of steps during one of the formation of embodiment detects session;

Figure 28 is a flow chart of steps during session that checks in of formation of embodiment;

Figure 29 is an exemplary plot, shows the content ID that how to produce of embodiment;

Figure 30 is an exemplary plot of a content ID correspondence table using of embodiment;

Figure 31 is a flow chart of steps, and wherein embodiment whole produces a content ID during detecting session;

Figure 32 A and 32B are flow chart of steps, wherein content ID of generation before the session phase that checks in of embodiment;

Figure 33 A and 33B are another flow chart of steps, and wherein embodiment produced content ID before the session phase that checks in;

Figure 34 is an exemplary plot, has shown among the embodiment how write control mark for one works;

Figure 35 is a flow chart of steps that is used for the retrieval charging information of embodiment;

Figure 36 is an exemplary plot of an accounting control system using of embodiment;

Figure 37 is an exemplary plot of a customer database using of embodiment; With

Figure 38 is an exemplary plot of the prepaid information used of embodiment.

Embodiment

Column heading will be described the preferred embodiments of the present invention under the basis now:

1. the tree structure of encrypted secret key and EKB

2. system configuration

3. the data path that is used for the SDMI content

4. the typical structure (PC of data link; Be equipped with the parts of main storage medium)

5. the typical structure of data recording equipment (handling the recording/reproducing apparatus of second storage medium)

6. mini disk Managed Solution

7. checking is handled

8. content encryption scheme

9. order

10. the transmission that detects and check in of content

11. be used to produce scheme with organize content ID

12. the processing that detects the back and before checking in, produce content ID

13. content is write control mark

14. charging information is handled

1. the tree structure of encrypted secret key and EKB

Before a data communication system of the present invention is gone through, a typical structure that is used for the encrypted secret key of system for content distribution will be illustrated.

In conjunction with reference to figure 1,2A, 2B and 3 following description are typical structures, wherein keep encrypted secret key by equipment and are used for receiving the content of encrypting from distribution end.

Fig. 1 shows a tree structure of encryption key.Reference number DV0-DV15 on the figure bottom represents the equipment of each received content data.The leaf of hierarchical tree structure is formed in the expression of these device examples.

Each equipment DV0-DV15 stores in its memory by node key and the key set that the blade key is formed.A node key is assigned to each node, and the leaf of node from the root to the indication equipment extends, and a blade key is assigned to each blade of representing an equipment.The key set that is called DNK (device node key) will describe in detail in the back.

In Fig. 1, the reference number K000-K1111 on the bottom represents to be assigned to the blade key of equipment DV0-DV15.Reference number K0-K111 represents to be assigned to the node key of all nodes, and those direct nodes of the root (have a root key KR) of all nodes below the top extend to the Section Point from the bottom.In the narration below, word " node key " can comprise root key when suitable.

In the tree structure of Fig. 1, what equipment DV0 illustrated has one by a blade key K 0000, node key K000, KOO and K0 and the DNK that root key KR forms.DNK in its store status has node key K000, K00 and K0 and the root key KR that uses the encryption of blade key K 0000 signal.In an identical manner, equipment DV5 has a blade key K 0101; Node key K010, K01 and K0; With root key KR.Equally, equipment DV15 has a blade key K 1111; Node key K111, K11 and K1; With root key KR.

The tree structure that Fig. 1 shows comprises 16 equipment DV0-DV15 that the form of four node layer of one-tenth arranged with level.Yet this is not limited to the present invention.Can there be many equipment to be included in the tree structure with the node layer of varying number.

Various information processing apparatus (equipment) can be included in the tree structure of Fig. 1 and can utilize various types of mediums that append to each parts with built-in or dismountable form: DVD, CD, MD and/or flash memory.In a system that constitutes by these parts, can there be different applied business jointly.For a system of different equipment and application coexistence, the hierarchical tree structure of Fig. 1 runs through the content-data and the key of distribution.

In the system of Fig. 1, wherein various device and application are resident side by side, represent DV0 by the equipment that dotted line surrounds in the above, DV1, and the part of DV2 and DV3 is created as one group, and they use identical storage medium.A content provider can send public content with encrypted format and also can send a public content key to these equipment to the equipment that constitutes this group.Each equipment in this group can be exported with encryption format, speech, payment data be to the content provider or to a suitable financial institution that is used to arrange content fee to use.Mechanism such as content supplier or financial institution with by one group of equipment DV0, DV1, DV2 and the DV3 swap data of dotted line among Fig. 1.In the tree structure of Fig. 1, have many such groups.These mechanisms with carry out data communication as each equipment of message data distribution member.

A single KMC by being used for armamentarium can Control Node key and blade key, or manages each group by the message data distribution member, such as with the content supplier and the financial institution of each group swap data.If any one is found leaky or other be compromised in them, to upgrade node key and blade key.By KMC, content supplier, financial institution and other related mechanisms carry out to upgrade and handle.

In the superincumbent tree structure, as shown in Figure 1, be included in four equipment DV0 in the group, DV1, DV2 and DV3 are shared in the K00 as node key and root key in their memory, K0, and KR.Public content key of permission of the node key structural representation of sharing, it is only by equipment DV0, DV1, DV2 and DV3 share.

For example,, can be arranged for DV0 to that key, DV1, the public content key of DV2 and DV3 and need not provide any new key to these equipment if the node key K00 that shares is created as a content key.(K00 CK), and is sending this value or is being carried so that be assigned to equipment DV0, DV1, DV2 and DV3 on a storage medium on the network to produce a value E to suppose to use node key K00 to encrypt a new content key CK.In the case, the shared node key K00 that uses each equipment to have, each equipment DV0, DV1, DV2 and DV3 by the deciphering this encryption value E (K00 CK) can obtain content key CK individually.

Suppose now on a given time t, the key K 0011 that equipment DV3 has, K001, K00, K0 and KR are analyzed by a hacker and are exposed.In the case, equipment DV3 need be disassembled and leave system so that the data of the exchange of (equipment group DV0 just is in the DV1, DV2 and DV3) in the protection system.

The processing procedure of dismounting equipment DV3 comprises with new key K (t) 001 from system, K (t) 00, and K (t) 0 and K (t) R replace node key K001, K00, K0 and root key KR, and a key that upgrades sends to equipment DV0, DV1 and DV2.Here, symbolic representation " K (t) aaa " representative is the key of the renewal of generation time t based on old key K aaa key K (t) aaa.

In addition, also can needs upgrade node key and/or root key KR, such as request or because the demand of certain distribution system according to a copyright holder according to other ambient conditions.Must give all relevant legitimate device updating record.

Now the key that how to distribute renewal will be described.Typically, shown in Fig. 2 A, be called a form that constitutes by data block that enables key block (EKB) and be sent out on the network or on a storage medium, be carried so that distribute to relevant equipment.If aforesaid equipment DV3 is dismantled from its group, then EKB is assigned to equipment DV0, DV1 and DV2.

Enable key block (EKB) by being used to distribute more new key to form to the encrypted secret key of equipment, this equipment is corresponding to each leaf of the tree structure of pie graph 1.Enable key block and also can be known as a key updating piece (KRB).

The key block EKB that enables that shows among Fig. 2 A is made up of the data block with a data structure, and this data structure only allows those equipment that need upgrade their node key to make renewal.Shown among Fig. 2 A is for an example of the formed data block of purpose like this, promptly a node key that produces the renewal of t is assigned to DV0, DV1 and DV2 in Fig. 1 tree structure.

Suppose key K 0011, K001, K00, K0 and KR are by illegally open.In the case, the key K that equipment DV0 and DV1 need upgrade (t) 00, K (t) 0 and K (t) R, the key K (t) 001 that while equipment DV2 need upgrade, K (t) 00, K (t) 0 and K (t) R.

EKB shown in Fig. 2 A comprises a plurality of encrypted secret key.The encryption key of form bottom is E (K0010, K (t) 001), and it is corresponding to the node key K (t) 001 of the renewal of blade key K 0010 encryption that is had with equipment DV2.The blade key that equipment DV2 uses it to have can obtain node key K (t) 001 by deciphering this encrypted secret key.

From second row of Fig. 2 A bottom, can use the key K (t) 001 of deciphering to come the key E (K (t) 001, K (t) 00) of enabling decryption of encrypted successively.Decryption processing provides the node key K (t) 00 of renewal.Equally, the encrypted secret key E (K (t) 00, K (t) 0) from second row of top is decrypted to produce the node key K (t) 0 that upgrades; Encrypted secret key E on the top (K (t) 0, K (t) R) is decrypted to produce root key K (t) R that upgrades.

Simultaneously, blade key K 0000 and K0001 and the node key K000 that is used for equipment DV0 and DV1 are not updated.The key K that these equipment need upgrade (t) 00, K (t) 0 and K (t) R and these keys of following acquisition: the node key K (t) 00 that obtains renewal by deciphering encrypted secret key E (K000, K (t) 00) from the third line at Fig. 2 A top; Obtain the node key K (t) 0 of renewal by the encrypted secret key E (K (t) 00, K (t) 0) in second row of deciphering top; With root key K (t) R that obtains by the encrypted secret key E (K (t) 0, K (t) R) on the deciphering top to upgrade.Equipment DV0, DV1 and DV2 obtain root secret agreement K (t) R that upgrades in this way.Index column among Fig. 2 A is represented as the node key of the key of deciphering and the absolute address` of blade key.

Node key K (t) 0 and K (t) R of hypothesis on Fig. 1 tree structure top do not need to be updated with node key K00 and need be updated separately now.In the case, among Fig. 2 B enables key block (EKB) and can be used to a node key K (t) who upgrades is distributed to equipment DV0, DV1 and DV2.

EKB among Fig. 2 B schematically is used to distribute a new content key to be shared in a particular device group.For example, suppose by the equipment DV0 in the group of Fig. 1 dotted line, DV1, DV2 and DV3 need a new public content ciphering key K (t).In the case, the public content ciphering key K (t) of new renewal at first utilizes slave unit DV0, DV1, the node key K (t) 00 of the renewal that the old node key K00 that DV2 and DV3 share derives, be encrypted to data E (K (t) 00, K (t)), then data E (K (t) 00, CK (t)) is assigned to relevant equipment together with EKB, shown in Fig. 2 B.

Above-mentioned scheme allow to be distributed in any other the group in equipment not with decrypted data, such as equipment DV4.Equipment DV0, DV1 and DV2 are by using node key K (t) 00 this ciphered data of deciphering based on the renewal of EKB.Deciphering provides content key CK (t) on the t in effective time.

As mentioned above, when key being arranged to a tree structure, use above-mentioned EKB to become needed to each key updating.This key structure easily allows to upgrade root key (KR) and node key according to ambient conditions.This just provides content to distribute in flexibly a kind of mode of and fine adjustment.

Fig. 3 has shown a kind of typical format that enables key block (EKB).As represented in this form, the number of node key is presented with nybble.The degree of depth of node key also is presented with nybble.The number of plies of node key degree of depth representation node is by the number of the node layer of one that the has distributed EKB tree-shaped equipment of forming layering.Provide the version of EKB with nybble.The version symbol as the nearest EKB of identification and expression and related content compatibility." reservation " zone is a self.

Since an offset address position of 16 bytes, the node key (or all keys) of an encryption of expression.Encrypted secret key or all key lists are the contents of the EKB of the reality in 16 * M byte area.These are those encrypted secret key of being discussed with reference to figure 2A and 2B such as combination.

In addition, EKB version and a digital signature of also comprising an encryption.Digital signature represents by an additional electronic signature of EKB distribution tissue, such as KMC, and content supplier, or be used to the financial institution that arranges content fee to use.According to an EKB who receives, the unit check digital signature is so that check whether this EKB enables key block by legal proper of issuing of EKB distribution group.

2. system configuration

An exemplary systems configuration that is fit to above-mentioned key structure will be described now.Fig. 4 has described an exemplary systems configuration.Device 1 that has been equipped with main storage medium corresponding to data link of the present invention and one second storage medium processing unit 20A corresponding to data recording equipment of the present invention.The device 1 and the second storage medium processing unit 20A that have been equipped with main storage medium have formed a data communication system.

The device 1 that is equipped with main storage medium schematically is made of people's computer one by one.Consider that for this reason for the back purpose of description, the device 1 that is equipped with main storage medium can be called as personal computer 1.Yet should be understood that the device 1 that is equipped with main storage and not only be confined to personal computer.

When the appropriate software that is used to carry out the memory that adapts to the SDMI content-data and transmission schematically began on a personal computer, the device 1 that is equipped with main storage medium was realized as data link of the present invention.Merge to or an outside hard disk drive (HDD) 5 that appends to personal computer 1 is used as main storage medium (with the main storage medium driver part).Although HDD5 is taken as main storage medium in description subsequently, this can not limit the present invention.Main storage medium is interchangeable can be any storage medium, such as CD and magneto optical disk, and such as the semiconductor memory and the portable semiconductor memory (for example storage card) that are built in the parts, and other.

The communication network 110 of device 1 through being used to communicate by letter that is equipped with main storage medium is connected to a content server 91.Connect permission device 1 download content data, such as music data from server.Obviously have a plurality of content servers 91, its various data download services can be taken as the data that personal computer user needs.1 some content-datas of downloading are to adapt to the SDMI data from content server 91 to personal computer; Other be not to adapt to SDMI's.

The transmission line that constitutes network 110 can be wired or wireless PSN.Transmission line is interchangeable can be the circuit of leasing that is based upon between personal computer 1 and the content server 91.Clearly, network 110 can be the internet, satellite communication link, a fiber optic network, the perhaps communication line of other kinds.

The HDD5 of personal computer 1 can accumulate the content-data such as music data that is produced by the additional disk drive in outside built-in or that use the program package medium 90 (back is also referred to as disk 90) such as CD-DA and DVD to pack into.From the dish 90 of packing into the content retrieved data be written to HDD5 be used for the storage.

The second storage

medium processing unit

20A or 20B are connected to personal computer 1, and the content-data of accumulating on HDD5 can be sent to device 20A or 20B.Copy as the content-data of the device 20A of a recording-member handling second storage medium or of the transmission of 20B record from personal computer to second storage medium.

Can be with various types of devices as second storage medium processing unit 20A or the 20B.In this embodiment, the second storage medium processing unit 20B is a tape deck that adapts to SDMI.For example, based on a semiconductor memory, such as a flash memory, this device 20B can load onto second storage medium that is made of a storage card that adapts to SDMI.What the second storage medium processing unit 20B illustrated can be to hold a recording/reproducing apparatus that adapts to the SDMI storage card.In such one is provided with, with encrypted format the content data recording that adapts to SDMI to second storage medium.

A kind of management information format that wherein keeps ID is provided on second storage medium that adapts to SDMI, and content ID is as the identifier of the content-data that adapts to SDMI.Being used to write content-data produces content ID and store the content ID of generation together with content-data on HDD5 to the application program of HDD5 on the time that data are write.Also use content ID to manage to check in and detect transmission.According to memory of content data, second storage medium that adapts to SDMI accepts to identify the record of a content ID of described data simultaneously.

The second storage medium processing unit 20A is a data recording equipment that adapts to SDMI.This device is needing the SDMI content-data of the deciphering of copyright protection to write second storage medium, and this will describe in detail in the back.Typical second storage medium is a mini disk.In the case, the second storage medium processing unit 20A is a mini disk recording/reproducing apparatus.In following description, the second storage medium processing unit 20A can relate to suitable recording/reproducing apparatus.

Be used for comprising that with the condition that decrypted format record adapts to the content-data of ASDMI a checking handles, as discussed later.Thereby the copyright protection characteristic is held effective.Mini disk or the like second storage medium (just those widely the public accepted) does not have and is exclusively used in the zone that holds content ID.This just needs to adopt a special content ID Managed Solution, and this will be described later.

Storage medium to and be not limited to mini disk from the second storage medium processing unit 20A write and read data; Media can be any storage card based on a semiconductor memory such as flash memory, the magneto optical disk of the mini disk of a rotation, a CD-R (recordable CD), a CD-RW (CD that can write), a DVD-RAM, a DVD-R, or a DVD-RW.Device 20A can be recording-members any and any these storage medium compatibilities.

Personal computer 1 is by a USB (USB) mouthful, and IEEE1394 mouth or the like is connected to second storage medium processing unit 20A or the 20B.In addition, also can use a wired or wireless transmission path, as long as it allows to transmit content-data in accordance with any other suitable transmission standard.

3. the data path that is used for the SDMI content

Fig. 5 has shown the typical data path by the SDMI regulation of a system that is used for Fig. 4.These paths of setting up of signal allow the music content data be accumulated to have in the personal computer 1 of HDD5 as main storage medium, and transmit content-data to an external equipment (second storage

medium processing unit

20A or 20B).In practice, the appropriate software of personal computer 1 operation by being used to store and transmit the music content data realizes data path.Processing procedure on the data path among Fig. 5 or step are represented by reference number DP1-DP9 and are come reference by these numerals in the following discussion.

On network 110, can distribute content-data, (being Web content) as shown in Figure 4 from an external server 91.Whether at first make a check (DP1) checks protected by copyright according to the content of SDMI distribution.The Web content data that two types distribution is arranged: those that are sent by server adapt to the data that the data (below be called the content that adapts to SDMI) of SDMI and those and SDMI have nothing to do (below be called the non-SDMI of adaptation content).

The content-data that adapts to SDMI according to the encryption of using a content key CK to illustrate such as the encipherment scheme of DES.If content-data by ATRAC3 (A3D) compressed encoding, then adapt to the content-data of SDMI be allocated to data E (CK, A3D).

When the Web content data of distributing are to adapt to SDMI, they are accumulated as SDMI content (DP1-DP2) on as the HDD5 of main storage medium.In the case, (CK A3D) is written to HDD5 to the state E that distributes with their of content-data.Interchangeable, encrypted once more by using another ciphering key K ' become E (CK ', A3D) with before storing on the HDD, content data encrypted can temporarily be deciphered.

If the Web content data are data of non-adaptation SDMI, then they are subjected to a watermark check, promptly are used for a screening test (DP1-DP3) of digital watermarking.It should be noted, append to one of computer 1 dish and drive (for example CD-ROM drives), on all the elements data of the program package medium regeneration such, directly carry out a watermark check such as CD-DA and DVD (being called the dish content) by built-in or outside.In other words, the content-data of all non-adaptation SDMI is subjected to watermark check.

If any content-data can not pass through watermark check, (DP3-DP5) that data are considered to copy on the SDMI data path.But realize refusal with many methods as the content-data of copies data by software design.Signal, the content-data of refusal can prevent to be sent to the copy of another media or to move, and perhaps in the contents processing process of whole adaptation SDMI, forbids the storage on HDD5.

If content-data has passed through watermark check, just,, data are copied with the form of copy control bit if being judged to have legal digital watermarking and allow, and then described content-data is considered to the proper content-data that copies.On content-data, make another inspection (DP4) and adapt to SDMI to check whether data are regarded as.Be provided with to determine whether to regard given content-data as by software design or by the user and adapt to SDMI's.

If determining that content-data is not counted as adapts to SDMI, the data (DP6) of then from the data path that adapts to SDMI, getting rid of non-adaptation SDMI in the case, data can schematically be sent to the tape deck of a non-adaptation SDMI.

If determine that content-data is processed as the data that adapt to SDMI, then data are encrypted and be stored as SDMI content (DP4-DP2) on HDD5.The signal, on HDD5 data with E (CK, A3D) or E (CK ', form A3D) is accumulated.

Above-mentioned data path allows HDD5 to be stored in the content-data of the adaptation SDMI that obtains on the network 110 as main storage medium, or the content-data of the adaptation SDMI that retrieves from the dish such as CD-DA or other mediums.For each SDMI content data item, below will describe based on suitable service regeulations, a unique content ID at that project is produced and is stored in is used for the content intelligent management on the HDD 5.

The SDMI content-data (SDMI Web content or SDMI disc content) that remains on the HDD5 is sent to the recording/reproducing apparatus 20B that adapts to SDMI according to relevant rule, can copies data on second storage medium of SDMI so that adapt to of charging apparatus 20B.According to the condition of determining, data also can be sent to recording/reproducing apparatus 20A and replacement device 20B.

The recording/reproducing apparatus 20B that adapts to SDMI is connected to the personal computer 1 of having incorporated HDD5 into, takes place below: for SDMI disc content data, relevant service regeulations have been stipulated in their transmission.For the purpose of copy, have only when meeting service regeulations, can make content-data be sent to the recording/reproducing apparatus 20B (DP8) that adapts to SDMI.

On data path, " detecting " refers to be used for the transmission of data of the last copy of second storage medium handled from main storage medium (HDD5) to the recording/reproducing apparatus 20B (or 20A) that is adapted to SDMI, is used to the purpose that writes down and regenerate." checking in " refers to the moving of reciprocal data, just from second storage medium to main storage medium.According to moving the described data of deletion from second storage medium to the content-data of main storage medium from second.

As the rule of using about the transmission of SDMI disc content data, the maximum transmission number that detects that allows is determined in advance.Signal, a given content data item can be detected nearly three times.This means that the content data item of being concerned about can be copied into maximum three second storage mediums that adapt to SDMI.Under the situation about transmitting that checks in, reduce the counting that detects that exists by a relevant content data item that has checked in.For example, if if given content data item has been copied into three second mediums and data item that adapt to SDMI to be checked in from one of them medium, then data can be copied to another again and adapted to second storage medium.In other words, on any one time, allow simultaneously resident nearly three adaptation SDMI second mediums of content-data.

For SDMI Web content data, relevant service regeulations also are defined in their transmission.When meeting service regeulations, content-data can be sent to the purpose (DP7) that the recording/reproducing apparatus 20B that adapts to SDMI is used to copy.

SDMI disc content data conditions is identical with transmitting, and the number that detects that maximum allows transmits to be determined in advance and is used for SDMI Web content data.Maximum detects counting can coil the identical or different of content-data with SDMI.Signal, only allow one to detect transmission.This means that a given content data item can only be copied into independent second storage medium that adapts to SDMI on any one time.In case described content data item is checked in, data item can be sent to another media once more so that other copy.

When the SDMI content-data being sent to second storage medium of an adaptation SDMI, on transmission line, transmit data with encrypted format according to top service regeulations.For example, with above-mentioned state E (CK, A3D) or E (CK ', A3D) transmit content-data.According to the SDMI content-data of the encryption that receives, the recording/reproducing apparatus 20B that adapts to SDMI copies the data of reception as the ciphered data to second storage medium.

When media regeneration during from the SDMI content-data of the copy of second storage medium, the recording/reproducing apparatus 20B that adapts to SDMI decipher the content-data of reproduction before data reproduction.In other words, on second storage medium, be stored as E (CK, A3D) or E (CK ', A3D) content-data uses ciphering key K or CK ' decrypted.

In other words, by decryption processing D{CK, E (CK, A3D) }=A3D or D{CK ', E (CK ', A3D) }, original content-data obtained with the form of ATRAC3 data (A3D).Therefore, the ATRAC3 content-data of acquisition is illustrated de-compresses into voice data, their regeneration and outputting musics.

By above-mentioned copy management measure, under copyright protection, place the content-data that adapts to SDMI.In other words, when transmitting on data path, the service regeulations data maintenance encrypted state according to relevant detects the recording/reproducing apparatus 20B that adapts to SDMI, and writes second storage medium in the charging apparatus.

Situation about taking place when recording/reproducing apparatus 20A being described below being connected to personal computer 1.Be different from the recording/reproducing apparatus 20B that adapts to SDMI, recording/reproducing apparatus 20A record decrypted data is to second storage medium that loads, such as mini disk.When on mini disk with the form of deciphering when being recorded, can the reproducing contents data by the common compact disc player of extensively being sold.This provides great convenience for domestic consumer.On the other hand, the format record content-data with deciphering is harmful to copyright protection.By requiring to meet the potential abuse of content-data that definite condition prevents to write the deciphering of recording/reproducing apparatus 20A.

Signal, the transmission of the SDMI Web content data that copy second storage medium to that are used to decipher can be subjected to following three conditions: (1) recording/reproducing apparatus 20A should suitably be verified; (2) relevant copyright holder should provide specific permission so that allow the content-data that transmits be copied; (3) should meet about detecting and the relevant service regeulations that check in and transmit.

As long as meet three top transmission conditions, content-data can not be sent on the equipment that tends to unrestricted copy but can only arrive on the recording/reproducing apparatus 20B, and this has just kept copyright protection function effectively.Kept content data encrypted also to guarantee copyright protection (by recording/reproducing apparatus 20A data decryption) in the whole process that on transmission line, transmits.

When SDMI Web content data are sent to recording/reproducing apparatus 20A, make check to check whether meet above-mentioned three transmission conditions (DP9).At first, verify recording/reproducing apparatus 20A in a predetermined mode.Based on the flag information or similar information, the copy that allows by the copyright holder certainly that are included in the content data.Then, check related content data force check in detect transmission on relevant service regeulations.

During three conditions above meeting, on transmission line, SDMI Web content data are sent to recording/reproducing apparatus 20A with encrypted format.Signal, with above-mentioned state E (CK, A3D) or E (CK ', A3D) transmit content-data.

Receive the SDMI Web content data of encrypting by recording/reproducing apparatus 20A (its typical structure is displayed among Fig. 7), and become the data (A3D) of original ATRAC3 compression by 28 deciphering of a decrypting device.Before being sent to a read/write cell 25, by the content-data of an encoder/decoder 24 (Fig. 7) coding deciphering.Successively, read/write cell 25 copy decrypted data to a mini disk 100.

When recording/reproducing apparatus 20A regenerates the content-data that copies from mini disk 100, data from the reproduction in the dish only need be decoded by the decoding processing of common mini disk system, such as the EFM demodulation, the decompression of ACIRC error correction and ATRAC packed data.When packing a common compact disc player into, these parts allow the data of the copy of mini disk to be reproduced normally.Thereby the compact disc player user by having common non-adaptation SDMI can enjoy music, the SDMI Web content data of regeneration copy from mini disk 100.

Needless to say, if the DP7 on the data path of Fig. 5, any service regeulations that detect among DP8 and the DP9 are not passed through, and then forbid allowing to transmit content-data, and data will not be sent to recording/reproducing

apparatus

20A or 20B.

4. typical structure (the PC of data link; Be equipped with the parts of main storage medium)

Fig. 6 has shown a typical structure as the device 1 of the outfit main storage medium of data link.Although this is an example that constitutes the computer of people one by one of the device 1 that is equipped with main storage medium, can form a similar structure when interchangeable, by as being used for the hardware of special use that data transmit parts of purpose particular design with same function.

In this embodiment, the software program that is used for realizing the function of a data link is installed in personal computer 1.The device of the outfit main storage medium that this just makes PC become to take on data link.In this manual, word " personal computer (PC) " or " computer " indication all-purpose computer widely.

Relevant program can be recorded on the hard drive (HDD) 5 or in advance in a POM 3 who incorporates into as the PC of storage medium.Interchangeable, program can be by temporarily or permanent being placed on (i.e. storage) medium 90 movably, such as floppy disk, and CD-ROM (Compact Disc-Read Only Memory), MO (magneto-optic) dish, DVD (Digital video disc), disk, or semiconductor memory.These movably medium 90 can offer the so-called program package software of user.

Except above-mentioned movably medium 90 is installed in the computer, can pass through a network through a digital satellite broadcasting link or with wired form, such as a LAN (local area network (LAN)) or internet, program is sent to computer from a download website.Computer is installed in the HDD 5 by the program of its communication unit 8 reception transmission and them.

The personal computer 1 of Fig. 6 is in conjunction with a CPU 2 (CPU), and it is connected to an I/O interface 10 through a bus 12.By operating by a keyboard mouse, and/or input unit 7 users process I/O interface 10 input commands that microphone is formed.In response to input command, CPU 2 carries out the relevant program that remains among the ROM 3 (read-only memory).Interchangeable, 2 programs that reside on the HDD 5 of CPU are packed among the RAM 4, this program is transmitted through satellite or by network, and before being installed on the HDD 5, receive by communication unit 8, perhaps before being written to HDD 5, this program is retrieved from removable storage medium 90, such as a CD that drives in 9 at.

5. in the program that execution is packed into, CPU 2 execution are about the processing of the data link of SDMI content-data, and this will be described later.

The result who is handled by CPU 2 schematically is output from an output unit 6 of being made up of a LCD (LCD) and loud speaker, for example by I/O interface 10.This result then is sent out or is recorded to when needing HDD 5 in addition by communication unit 8.

The communication unit 8 of this structure can be through network shown in Fig. 4 and various server communication.In other words, computer 1 can be from the Web content data of exterior content server 91 downloads such as music content.By above-mentioned data path, the Web content data of download are processed into the content-data of adaptation SDMI or the content-data of non-adaptation SDMI.At least after adapting to the SDMI processing, data are stored as the content-data that adapts to SDMI on HDD 5.When being accumulated on HDD 5 like this, the SDMI content-data is sent to the second storage medium processing unit 20B that adapts to SDMI or is sent to second storage medium processing unit (recording/reproducing apparatus) 20A that has verified.

Linkage unit 11 is connected to second storage medium processing unit 20A or the 20B in a kind of mode that enables to carry out with it data communication.Signal, linkage unit 11 can be a USB interface or an IEEE1394 interface.Also can use alternative, suitable wired or utilize the wireless interface of infrared ray, radio wave such as any other, or other appropriate carriers and based on relevant technical standard.

Those that are not necessarily limited to only on a time series basis, finish as the processing that realizes data path in conjunction with being used to of explaining with reference to figure 5; They can comprise those processing parallel or that implement separately (for example, with parallel or OO mode).

Can be by a single computer or by a plurality of executive programs with a kind of distribution form.Program also can be sent to the computer that is used to carry out or all computers of a long range positioning.

Fig. 7 has shown the typical structure of second storage medium processing unit (recording/reproducing apparatus) 20A.This is an example, and one of them mini disk tape deck is taken on recording/reproducing apparatus 20A and one of them mini disk (magnetooptical disc) is employed as second storage medium 100.In the following description, second storage medium 100 can be called as suitable mini disk 100.

Fig. 7 has only illustrated two processing square frames: one is used for data are write and from reading as the mini disk of second storage medium 100, and another is used to handle from the data of the device 1 that is equipped with main storage medium and transmits.Omitted the square frame that is used to drive mini disk, the servo-control mechanism that is used to coil and be used for data reproduction and the square frame of output; Reason is that they are known square frames, is representing the characteristics and the function of the equivalence of common mini disk recording/reproducing apparatus.

In recording/reproducing apparatus 20A, a MD control unit (CPU) 21 is as a controller, controlling recording and playback of data to and from mini disk.More clearly, the data read or write to or from the process of mini disk, MD control unit 21 control rotation drives main axle servo mechanism, focus servo mechanism, track servo mechanism and slide plate servomechanism; A shaven head on the adjustment disk and the laser beam and the magnetic field application of a magnetic head, and control reads or writes the Code And Decode of data.

Read/write cell 25 comprises shaven head, magnetic head, a dish drive block and a SERVO CONTROL piece.This is actually one and data is write mini disk 100 and from a unit of mini disk 100 reading of data.

Encoder/decoder 24 codings are write the data of mini disk 100 and are decoded from the data of dish.As everyone knows, the mini disk system based on the ACIRC error correcting code to recordable digital coding with carry out EFM and handle.Clearly, before coded data was delivered to read/

write cell

25,24 pairs of recordable data of encoder/decoder were carried out ACIRC coding and EFM coding.

In data reproduction, encoder/decoder 24 receives the data of reappearing from read/write cell 25, and the data of reception are subjected to such as binary system, the decoding processing of EFM demodulation and ACIRC correction process.

The data that buffer storage 30 bufferings are written to or read from mini disk 100.Particularly, buffer storage 30 provides a kind of usually said shockproof function.

For the record of data, buffer storage 30 is temporarily held the recordable data that have been compressed coding by ATRAC/ATRAC3.From the memory discontinuous read the data of buffering.Be sent to encoder/decoder 24 from the data of the reproduction of buffer storage 30 and be used for write operation.

For data reproduction, the temporary transient reservation of buffer 30 from mini disk 100 be reproduced and by the data of encoder/decoder 24 decodings.The data of buffering are read out and are subjected to the compression coding of a codec 23 continuously.

By ATRAC/ATRAC3 codec 23 compression and decompression data.Before being written to mini disk 100, based on ATRAC/ATRAC3 by codec 23 packed datas and coded data, as mentioned above.Be not imported into recording/reproducing apparatus 20A if any such as the pcm audio data is not the data of compressed encoding as recordable data, the compressed encoding that codec 23 makes described data carry out ATRAC or ATRAC3 is handled.Compressed like this data are sent to encoder/decoder 24.

For data reproduction, by read/write cell 25 playing data for broadcasting from dish, and by encoder/decoder 24 decodings.The data representation of decoding is by those data of ATRAC/ATRAC3 compressed encoding, and is sent to codec 23 by buffer storage 30.In order, codec 23 by ATRAC/ATRAC3 decompress to receive data, and therefore recover schematically on 44.1kHz digital audio-frequency data with 16 bit quantizations.By relevant output circuit, show that digital audio-frequency data stands the conversion such as D/A, analog and the processing of amplifying and so on become the speaker output signal that is reproduced into music of example.The interchangeable equipment of not changing that is output to other of digital audio-frequency data.

So far, described structure is known structure at common mini disk recording/reproducing apparatus.The special place of relevant recording/reproducing apparatus 20A is that it comprises the parts of the computer of people one by one that is used for addressing formation outfit host memory device 1.Clearly, recording/reproducing apparatus 20A has a communication unit 26, a DMA 27, a decrypting device 28, a cache memory 29, a stream control unit 31 and a system control unit 32, they are as the parts that the content-data that transmits from the device 1 that is equipped with main storage is received and deciphers.

System control unit 32 (CPU) provides whole control on whole recording/reproducing apparatus 20A.Example, system control unit 32 provide be used for verifying about the instruction of communicating by letter with personal computer 1 and be used for the instruction that produces at the checking relevant data, with personal computer 1 exchange command, and handle the content-data that transmits from computer.In conjunction with such control program, system control unit 32 provide instruct MD control unit 21 in case to write and read from the content-data of mini disk 100 on control, and in the retrieval of the management information on the dish with upgrade and control.

Although do not show, provide an operating unit and a display unit as user interface.These parts are also controlled by system control unit 32, and operating unit is monitored and is adjusted to be used for user's operation, and display unit is for showing the details Be Controlled.

The linkage unit 11 of personal computer in communication unit 26 hookups 6.This connects permission unit 26 and computer 1 swap data.Signal processing are carried out in USB and the IEEE1394 standard traffic unit 26 that pass through of signal.From personal computer 1, communication unit 26 receives various command and SDMI content-data.

The SDMI content-data that is received by communication unit 26 is placed into cache memory 29 under the control of DMA (direct memory visit) 27.Interchangeable, according to the control of CPU rather than DMA 27, obviously data also can be moved to cache memory 29.Decrypting device 28 is parts being engaged in the decryption processing of SDMI content-data.Clearly, decrypting device 28 deciphering remain on the content data encrypted in the fast storage 29.When such deciphering, content-data is moved to other zone of identical cache memory 29.

Used the encrypted SDMI data of content key CK or CK ', comprised at least being used to the information that allows key to be identified.Discuss as describing in detail in the back, be retained as the information that allows content key to be identified by recording/reproducing apparatus 20B in conjunction with the DNK (device node key) that Fig. 1 mentioned.Corresponding to the blade key that the device 20B of one of equipment among Fig. 1 (DVx) has node key and a root key and constitutes DNK, by using the blade key specific to described equipment, node and root key are encrypted.The above-mentioned EKB that uses DNK or be sent out, decrypting device 28 is confirmed content key CK according to ambient conditions.

When decrypting device 28 keeps DNK as the information that given SDMI content-data allowed content key be identified, unit 28 passes through D{CK, E (CK, A3D) }=decryption processing of A3D, can decipher the content-data that sends from their encrypted state, such as use content key CK be called the ATRAC3 packed data E (CK, A3D).Before being written to mini disk 100 by read/write cell 25, the data of the ATRAC3 compression that obtains like this are by encoder/decoder 24 codings.

The SDMI content-data can be or can not be data with the ATRAC3 of encryption format compression.Interchangeable, the SDMI content-data can be to use the encrypted linear PCM data of content key C.For example, (CK, PCM) content-data of state can be sent out and be transfused to E.In the case, decrypting device 28 significantly deciphering input data so that by D{CK, E (CK, PCM) } processing obtain the linear PCM data.The PCM data are subjected to the ATRAC3 compression of codec 23, the coding of encoder/decoder 24, and write mini disk 100 by read/write cell 25.

Decrypting device 28 can further be preserved for verifying the key in the processing procedure.In the back in the checking that will describe example, the privacy key S that decrypting device 28 is utilized a public keys P and kept by recording/reproducing apparatus 20A.These keys also are stored in the decrypting device 28.In addition, by using privacy key S to finish an encryption.

Decrypting device 28 comprises a hash (hash) engine, is used for calculating generation content ID by so-called hash function.The back will describe how to produce content ID in detail.

Be sent to stream control unit 31 such as the data of ATRAC3 compression or the SDMI content-data of the deciphering the PCM data from cache memory 29.Stream control unit 31 is forwarded to MD control unit 21 (part of record block) to the SDMI content-data of deciphering, and from there to codec 23, encoder/decoder 24, read/write cell 25 and buffering memory 30, as preparation at mini disk 100 enterprising line items.From MD control unit 21 request (XARQ) is arranged, prompting stream control unit 31 transfers data to unit 21.Receiving, deciphering and write data between the processing of mini disk 100 such as content-data, stream control unit 31 provides regularly and adjusts.

In above-mentioned structure, be in state E (CK, A3D) or E (CK, the at first decrypted data of getting back to the ATRAC3 compression of SDMI content-data that send from personal computer 1 PCM).Before writing mini disk 100 by read/write cell 25, the data of the ATRAC3 of deciphering compression are then by encoder/decoder 24 codings.

Whole transmission content-data detect or the process that checks in, in perhaps whole other the communication session, personal computer 1 sends various command to recording/reproducing apparatus 20A.These orders are received and are forwarded to therefrom system control unit 32 by communication unit 26.According to the order that provides, system control unit 32 is carried out various processing and is made communication unit 26 send response and answers personal computer 1.

6. mini disk Managed Solution

Now explanation is recorded in data and management information on the mini disk 100.Digital record/regenerative system such as the mini disk system, is recorded in a known TOC (contents table) on the storage medium of loading, as the management information that is used for controlling to the data of media with write operation reading.The write and read data to or before the storage medium such as disk, recording/reproducing apparatus retrieval TOC information is also put into an internal storage to this information.In the whole write or read operating process, recording/reproducing apparatus is with reference to the suitable position of TOC information to determine to visit on storage medium of this reservation.

Mini disk has two types TOC information: the P-TOC (main in advance TOC) of the pit record that can not write again, with be recorded with magnetic-light form with the U-TOC that can be updated (user TOC), with reflection record or the music of deletion or the fragment of other data.If any data slot is recorded or is deleted, in an internal storage, at first upgrade U-TOC information.Data updated then remains on wherein U-TOC information with the U-TOC zone that a kind of mode of suitable timing is written on the dish with renewal.Design U-TOC information is so that manage content-data such as voice data with the unit that is called track on the dish.The signal of track corresponding to a snatch of music.

Explained later is recorded in data on the mini disk 100 to be called the unit of trooping.The mini disk system produces by a series of and is called the data flow that the recordable data unit of trooping is formed.The typical form of trooping is illustrated among Fig. 8.As shown in Figure 8, continuous formation is trooped CL as the track record on the mini disk, and each wherein increment of the minimum of record data of conduct of trooping.

Each CL that troops comprises that three from SCFE to SCFC connect sector, a sub-data sector SCFF and 32 host sectors SC00-SC1F.In other words, each is trooped and is made of 36 sectors.A data unit of 2,352 bytes is represented in a sector.

Chainning sector from SCFE to SCFC is used as a buffering area between the record or is used to adjust other operation of purpose.Subdata sector SCFF can be used to write down the information that is created as subdata.TOC data and voice data are written to 32 host sectors SC00-SC1F.

The sector is subdivided into the unit that is called voice group.Clearly, two sectors are divided into 11 voice group.As example, two continuous sectors (just, the sector of an even number such as the sector of a sector SC00 and an odd number such as sector SC01) comprises voice group SG00-SG0A.Each voice group by 424 bytes form and hold be equivalent to 11.61 milliseconds of sense of hearings output voice data.

A voice group SG has and is recorded in two data on the split tunnel: a left side (L) passage and a right side (R) passage.Example, voice group SG00 is made up of L channel data L0 and R channel data R0; Voice group SG01 is made of L channel data L1 and R passage R1.A 212-byte area forming L or R channel data district is known as a speech frame.

Fig. 9 A and 9B have shown a typical regional structure of mini disk.Fig. 9 A represents that radial the inside from dish is to the scope zone of radial ragged edge.As a magneto optical disk, mini disk 100 has pit areas in its radial the inside, has wherein write down read-only data by the embossing pit.This is the zone of wherein having write down P-TOC information.

The radial outside of pit areas is a magneto-optic zone with groove, and it is as the gathering sill that is used for track record.This is the zone that data can be written to and therefrom read.In this magneto optical disk zone, the radial penetralia 0-49 that troops constitutes a directorial area and the 50-2 that troops, and 251 form a program area, have wherein write down actual snatch of music or other data, segment to a track.Outside, radial program area be a draw-out area.

Fig. 9 B has shown a more detailed management area figure.In Fig. 9 B, the sector is arranged to be put by vertical with trooping by level.In this directorial area, for the pit district, buffering area of 0 and 1 formation of trooping.Troop 2 as a power calibration area PCA, the power output that is used to calibrate a laser beam.

Troop and 3,4 and 5 hold a U-TOC.To be described in detail later U-TOC, it is arranged forming data form of per 32 host sectors regulation that each is trooped.In data format, write down relevant management information, such as track address in the program area and address, clear area, together with the date and time of track name and record.These U-TOC data clusterings are become a row triplicate when record, just, form and

troop

3,4 and 5.

The buffering areas of 47,48 and 49 formations of trooping at the program area.The dash area PD that shows among Fig. 9 B can be allocated to a zone, wherein writes prepaid information, and this describes in the back.

In by troop 50 (32h of hexadecimal notation) and the program area that forms of trooping afterwards, each 32 host sectors (SC00-SC1F) in each is trooped are held voice data such as music data with the compressed format of so-called ATRAC.The track (content-data) and the recordable zone of record are managed according to U-TOC.In the program area, as mentioned above, each sector SCFF that troops can be used to write down the information set of preserving as subdata.

By reference Figure 10 the U-TOC sector is described now.As in conjunction with discussing, form P-TOC in the pit areas on the penetralia of radial dish 90, and hold a read message with reference to figure 9A and 9B.But P-TOC be used for management dish posting field position (just recordable user area), read zone and U-TOC zone.On all data are recorded in a read-only optical disc in the pit, other the data that the P-TOC by the use dish can manage snatch of music or keep with a ROM form.In the case, this coils the U-TOC that does not wherein form.In the description of following, P-TOC will be discussed further.

Figure 10 has shown a typical format of U-TOC sector 0.The U-TOC sector can be from the sector 0 extends to sector 32.Host sectors SC00-SC1F in trooping corresponding to one in these recordable sectors, as mentioned

above.Sector

1 and 4 is configured for writing down a zone of character information, and sector 2 is as a zone that is used to hold the date and time of finishing record simultaneously.These

sectors

1,2 and 4 are described no longer in addition.

U-TOC sector 0 constitutes a data field, wherein writes down content-data (track) and relevant clear area such as the relevant record of music, just, can write down the management information in the zone of more content-datas.For example, if a snatch of music is recorded to mini disk 100, MD control unit 21 is found free area on dish and data is write that zone by reference U-TOC sector 0.In data reproduction, MD control unit 21 detects U-TOC sector 0 finding the zone of stored regeneration snatch of music, and obtains that zone of visit so that reset.

In Figure 10, the data field of U-TOC sector 0 (4 bytes * 588=2,352 bytes) has by a byte data piece and forms a kind of synchronous mode, and each byte data piece is made up of the 0th or the 1st byte that begins to locate in the sector.Log-on data piece back is three bytes, and it holds the address of trooping (H and L) and a sevtor address, and these three bytes are replenished by the mode information of a byte.These parts are formed a stem.Three byte address sections provide the address of sector itself.

The stem that has a synchronous mode and wherein write down the address constitutes in above-mentioned mode, and this is not only for U-TOC sector 0, also is directed to the sector and the program area of P-TOC sector.For each sector, the address of the described sector of leader and its synchronous mode.

Then such as the data of a manufacturer (manufacturer) code, a model code, first orbit number (TNO), last orbit number (last TNO), sector user mode (sector of use), a dish sequence number and the such data of dish ID are written to suitable byte location.

In addition, also provide a pointer area, wherein write down various pointers (P-DFA, P-EMPTY, P-FRA, P-TN01 to P-TN0255).These pointers are used for making corresponding to a form district track (for example, snatch of music) and the clear area of user record, the purpose that is used to verify, and the back will be described.

The form district is made of 255 part forms (01h-FFh) corresponding to pointer P-DFA to P-TN0255.Each part form holding track is given the start and end address of certain portions and the mode information (track mode) of relevant described part.Because can be continued continuously to another part by a part of representing for the certain portions form, each part form can hold the link information of the part form of the start and end address of representing to comprise the part that is linked.A part refers to that part of a track, and wherein temporary transient continuous data are recorded in the continuous mode of a kind of physics.

Start and end address represents to constitute one or more parts of a single snatch of music (track).Each these address is presented with a kind of form of shortening of expression a cluster, a sector and a voice group.

The no problem regeneration of such recording/reproducing apparatus partly conducts interviews by connecing one with part of seamless mode from a snatch of music (track) of the discontinuous part of a plurality of physics.For the sort of ability, can be written to a plurality of separated portions so that effectively utilize recordable zone by each snatch of music of user record.

Provide above-mentioned link information so that assignment numbers (01h-FFh) to the part form, allows relevant form designated and linked.In the form district of U-TOC sector 0, a part form is represented a part.Example for the formed fragment music of the part that three links are arranged, by using the position of all parts of being managed to relate to by three part forms of suitable link information connection.

In practice, the link information in U-TOC sector 0 is represented by suitably calculating the byte location value that obtains by one.More clearly, can specify a given part form by calculating " 304+ (link information) * 8 (byte location) ".

In the table area of U-TOC sector 0, part form 01h-FFh has their content by the pointer in the pointer area (P-DFA, P-EMPTY, JP-FRA, P-TN01 to P-TN0255) expression, in the mode that describes below.

Pointer P-DFA is illustrated in defective zone on the magneto optical disk 90.In other words, first of a part table of the track of pointer P-DFA appointment expression formation cut or other failure areas or all tracks (part) or a plurality of part tables.If there is a defect part, one of them of pointer P-DFA specifying part submeter 01h-FFh; The part form of appointment uses a beginning and an end address, represents the part of defective.If include the more defects part, first table has the link information of specifying other part tables, and these other part table is represented the part of defective.If there is no other defect part, the link information of the part table of signal comprises 00h, and expression does not have other link.

First of the part form that pointer P-EMPTY indication is not used in table area or a plurality of part forms.If there is a untapped part form, one of them of pointer P-EMPTY specified portions form 01h-FFh is as described part form.If there are a plurality of untapped part forms, they are by continuous appointment, by the suitable link information of use from the beginning of the part form of pointer P-EMTY appointment.Therefore all untapped part forms are linked in the table area.

Clear area (zone that comprises deletion) on the pointer P-FRA indication magneto optical disk 90, wherein data can be written into.Pointer P-FRA specifies first of a part form or a plurality of part forms, and indication constitutes a track or all tracks (part) of a free area.If there is a clear area part, one of them of pointer P-DFA specified portions form 01h-FFh; The part form of appointment uses its start and end address to indicate the clear area part.If a plurality of clear areas part is arranged, first's table has the link information of other part tables of continuous appointment, has link information 00h up to one.

Figure 11 has schematically shown how to use part table management clear area part.Here shown is a state, and wherein

part

03h, 18h, 1Fh, 2Bh and E3h constitute a free area and be affixed to the link information indication of appropriate section table.In addition, management of defective areas and untapped part table in an identical manner.

Pointer P-TN01 to P-TN0255 indicates user thereon to make the track of record.Signal, pointer P-TN01 specifies a part table, shows and has write down a part of the first orbit number certificate or the part the earliest of a plurality of parts thereon.If first fragment of the music that is recorded of forming first track is by continuous holding, promptly along a single unbroken part storage, then the recording section of first track is identified by the start and end address in the part table of pointer P-TN01 indication.

Disperseed on a plurality of parts of dish if be recorded into second fragment of the music of second track, these parts are designated in a kind of mode of temporary transient order.Clearly, part table by pointer P-TN02 appointment is stipulated a temporary transient part table subsequently successively with link information, also use link information, another is subsequently part table or the like temporarily, until the part table has (identical mode as shown in Figure 11) till the link information 00h.

As described, the data of holding second fragment of forming music are sequentially designated entirely, and the data in U-TOC sector 0 can be used to obtain the visit to the part of any dispersion, are used to write thereunto or read operation therefrom.In other words, can from discontinuous part, retrieve continuous music data or data are write wherein, but use the mode of posting field with a kind of optimum efficiency ground.

Each part table record one byte track mode information.This byte constitutes the track attribute information.Be identified by reference number d1 (MSB)-d8 (LSB) if constitute eight bits of this byte, define the track mode by a byte information as follows:

D1 ... 0: write permission; Not 1 write-protected (not rewriteeing, not editor)

D2 ... 0: copyright; 1: do not have copyright

D3 ... 0: original; 1: the copy of the first generation at least

D4 ... 0: voice data; 1: undefined

D5, d6 ... 01: ordinary audio; Other: undefined

D7 ... 0: monaural; 1: stereo

D8 ... 0: add the series of fortified passes; 1: add reopening

On rewritable magneto optical disk 90, as described, realized the disk area managerial role by using P-TOC while recording musical fragment in recordable user area, and passed through the component management free area of U-TOC.Expectation structure U-TOC is so that by rewriteeing simply U-TOC, and the track of record is divided, makes up or other editor on the mini disk 100.

When mini disk 100 was loaded into the read/write cell 25 of recording/reproducing apparatus 20A, the MD control unit 21 of device 20A was at first read the TOC data and the U-TOC data of retrieval is put into a specific region of buffer storage 30.Thereby on whole mini disk 100 subsequently write, read and the edit operation process in, with reference to the data that keep like this.

Content-data where is recorded (to track) or the track that where writes down is edited, and at first is updated in U-TOC data in the buffer storage 30 to reflect this variation.The U-TOC data of upgrading then are written to mini disk 100 so that upgrade with a kind of suitable timing mode from buffering memory 30.

7. checking is handled

In conjunction with the SDMI data path, as a precondition, personal computer must be verified recording/reproducing apparatus 20A as mentioned, this precondition be used to accept to be recorded to mini disk 100 deciphering content-data detect transmission.Thereby verifying it is a processing procedure, recording/reproducing apparatus 20A is identified as a legitimate device and is used to write down unencrypted content-data.

When the recording/reproducing apparatus of the recording/reproducing apparatus 20B that adapts to so long as not SDMI is connected to the linkage unit 11 of personal computer 1, verify processing.When the recording/reproducing apparatus 20B that adapts to SDMI was connected, personal computer 1 check checked that the parts that whether continue are actually that SDMI adapts to.If the parts that judgement connects are not the recording/reproducing apparatus 20B that SDMI adapts to, then guiding enters the checking processing to check whether these parts are recording/reproducing apparatus 20A.The process that a typical checking is handled is described below.

The checking is here handled and is comprised use a kind of proof scheme based on asymmetric cryptography (public-key cryptography scheme just).In a kind of asymmetric cryptography is provided with, make an encryption key be different from a decruption key.If reference character Db represents the unencrypted data, Ke at an encryption key and Kd at a decruption key, then by an encryption C=E (Ke, Db) enciphered data Db is to become data C, with by decryption processing D (Kd, C)=Db deciphers this ciphered data C so that turn back to unencrypted data Db.

Encryption key Ke and decruption key Kd constitute pair of secret keys.One of them of key is disclosed in a public keys for this and another is stored in a suitable position as a privacy key.In the description of subsequent authentication processing, this public keys to key is represented that by P privacy key is represented by S.In this was provided with, as mentioned above, recording/reproducing apparatus 20A kept public keys P and privacy key S in its decrypting device 28 (or system control unit 32), and they will be as encryption key Ke and decruption key Kd.

For checking, the CPU2 that is equipped with the parts (personal computer) 1 of main storage medium at first sends the system control unit 20A of a checking request command to the second storage medium processing unit 20A.Then finish the step shown in Figure 12 at the CPU2 and the recording/reproducing apparatus 20A (the second storage medium processing unit just) of personal computer 1 (just being equipped with the parts of main storage medium).

When beginning was handled in checking, the system control unit 32 of the second storage medium processing unit 20A arrived step S1 and makes communication unit 26 send to the device 1 that is equipped with main storage medium to public keys P from decrypting device 28.Public keys P also is known for the device 1 that is equipped with main storage medium.Next, if two parts can be verified the consistency of their public keys P, step S1 does not need to be performed.

According to the public keys P that receives, the CPU2 that is equipped with the device 1 of main storage medium advances to step S2 and produces a random number r.At step S3, CPU2 sends to the second storage medium processing unit 20A to the random number r that produces.

At step S4, the system control unit 32 of the second stores processor device 20A receives this random number r and uses the privacy key S that remains in the decrypting device 28 to encrypt the number that receives.At step S5, (S r) sends to the device 1 that is equipped with main storage medium to system control unit 32 ciphered data E.

According to the ciphered data E that receives (S, r), the CPU2 that is equipped with the device 1 of main storage medium arrive step S6 and use public keys P encrypt this ciphered data E (S, r), just by a decryption processing D{P, E (S, r) }.At step S7, CPU2 is used in the random number r that produces among the step S2 and decrypted data D{P from step S6, and E (S, r) } compare.If public keys P and privacy key S constitute a pair of legal key, the result who then compares should be r=D{P, E (S, e) }.

Under the situation of comparison match, the second storage medium processing unit 20A is judged the privacy key S of reservation corresponding to public keys P.In the case, step S8 follows the back step S9, verifies that wherein the second storage medium processing unit 20A is as legal parts.

If result does not relatively match, then step S8 follows the back step S10.In step S10, refuse the second storage medium processing unit (just, the SDMI content-data can not be transmitted) as illegal parts.

When handling by top checking when identifying that the parts that connect are legal second a storage medium processing unit 20A, the device 1 that then is equipped with main storage medium is confirmed to be used to transmit parts that the qualification of SDMI content-data connects and is met as one of condition of a legitimate device.

8. content encryption scheme

In system of the present invention, recording/reproducing

apparatus

20A or 20B are corresponding to one of them of bottom layer node among Fig. 1.Realize the cryptographic structure shown in Fig. 1 by example system as described below.

Figure 13 represents a flow process of content-data and key.When a given content data item CT1 when an external server 91 is assigned to personal computer 1, (CK, A3D), (KR CK) and the form of EKB, delivers to content data item CT1 and be stored on the HDD5 E with E.(CK, A3D) expression is by the content-data ATRAC3 of the compression of a content key CK encryption of use for E.Content-data is formed main data, such as the data of music or other types.E (KR, CK) plan with content key CK deciphering, and use the encrypted content-data of root key KR in conjunction with the description of Fig. 1 by expression.EKB represents can be allowed key block information in conjunction with what Fig. 1,2A, 2B and 3 discussed.For this embodiment of the invention, EKB constitutes the required information of root key KR of upgrading.

The data of above-mentioned classification are assigned with each one group of form of transmitting a given content data item.As shown in Figure 1, content data item CT1, CT2 or the like are stored in HDD5 upward as data set.

When personal computer 1 transmitted content-data to recording/reproducing

apparatus

20A or 20B, (CK, A3D), (KR CK) sent into one group with EKB to E E to use proper step.Recording/reproducing

apparatus

20A or 20B corresponding to one of equipment among Fig. 1 are assigned with a unique blade ID and keep a DNK (device node key).

According to the content data set that receives from personal computer 1, when by

device

20A or 20B writes or when second storage medium reads, decrypted or immovable the leaving in concentrated content data encrypted.More clearly, when from the media regeneration of the SDMI recording/reproducing apparatus 20B that adapts to, perhaps when the media of the recording/reproducing apparatus 20A that writes non-adaptation SDMI, content-data is decrypted.

Decryption processing comprises at first uses DNK that is kept by parts and the EKB that has been sent out that root key KR is decrypted.By utilizing decrypted root key KR decrypted content keys CK now.The content key CK of deciphering then is used to obtain unencrypted content-data A3D.

Now by with reference to accompanying drawing 14A, 14B and 15 uses description to DNK and the decrypting process of recording/reproducing apparatus 20A.Suppose a tree structure shown in the key pie graph 14A, and a blade ID SET0 and a blade key K 000 are assigned to recording/reproducing apparatus 20A.In the case, the DNK that is stored among the device 20A has the information that is listed among Figure 14 B.That is to say that blade ID is retained as SET0, the blade key is K000.Here storage is information, its definition from the blade of root key K000 identification to Figure 14 A the path domain of root key KR of tree structure.In other words, node key K00, K0 and root key KR are stored.It should be noted, when storage, use blade key K 000 encryption node key K 00, K0 and root key KR.As shown in Figure 14B, key is actual be stored as E (K000, K00), E (K000, K0) and E (K000, KR).

Like this, the DNK of storage allow recording/reproducing apparatus 20A by use the key E that transmits (KR, CK) the content-data E that transmits of deciphering (CK, A3D).More clearly, use blade key K 000 by deciphering D{K000, and E (K000, KR) }, recording/reproducing apparatus 20A at first obtains root key KR.Use the root key KR of deciphering to pass through deciphering D{KR, and E (KR, CK) }, then obtain content key CK.After this, use the content key CK of deciphering to pass through deciphering D{CK, and E (CK, A3D) }, obtain unencrypted content-data A3D.

As mentioned above, root key KR and node key can not keep constant; According to various factor, they can be changed.In a system, such as used root key KR encrypted content key CK before being transmitted, root key KR can be changed when whenever next different content data item was processed.For example, for better copyright protection, a music supplier can change root key KR at each content data item.In the case, as mentioned above, synchronously send an EKB so that the root key KR that changes verifies each legitimate device.

Suppose content-data E (CK now, A3D), and the content key E that the root key KR ' of a same EKB of company and a renewal of a use encrypts (KR ', CK) send together, EKB comprises that data E (K0, KR ') is as the root key KR's ' of the renewal of using node key K0 to encrypt.When pass through when the SET0-SET3 of Figure 14 A reports to equipment to new root key KR ' of signal, use the root key KR ' of node key K0 encryption renewal.Obviously, if equipment SET0 and SET1 only need notified new root key, can give their EKB who comprises data E (K00, KR '), the root key KR ' of the renewal that node key K00 encrypts is used in data E (K00, KR ') expression.

On the other hand, as described with reference to figure 14B, the DNK of recording/reproducing apparatus 20A keep blade key K 000 and E (K000, K00), E (K000, K0) and E (K000, KR), as the root and the node key that use 000 encryption of blade key K.The step of Figure 15 (1)-(4) have shown and have provided how decryption content data A3D of above-mentioned key.

(1), use DNK at first to obtain node key K0 as data E (K0, KR ') when being sent out into EKB.More clearly, use blade key K 000, by a decryption processing K0=D{K000, E (K000, K0) } and obtain node key K0.

(2) the node key K0 that obtains like this is used to decipher the E (K0, KR ') among the EKB.In other words, by a decryption processing KR '=D{K0, E (K0, KR ') } obtain the root key KR ' that upgrades.

(3) like this root key KR ' of the renewal of deciphering be used to decipher transmission content key E (KR ', CK).Clearly, by a decryption processing CK=D{KR ' E (KR, CK) } obtain content key CK.

(4) Xie Mi content key CK is used to by a decryption processing A3D=D{CK, and E (CK, A3D) } acquisition unencrypted content-data A3D.

By finishing top step, the content-data that recording/reproducing apparatus 20A deciphering transmits is also write decrypted data in the mini disk 100 of load.Wherein recording/reproducing apparatus 20B regeneration is from the content data encrypted of second storage medium, and the step above device 20B carries out is so that decipher this ciphered data be used to regenerate music or other data.

9. order

In the whole communication session that detects or check between transmission and other operations, between personal computer 1 (being equipped with the parts of main storage medium) and recording/reproducing

apparatus

20A or 20B (the second storage medium processing unit), exchange various control commands and respond these orders.In these orders, will only those orders relevant with the operation of stipulating this system be described now.Such specific operation will be described in the back.

Figure 16 has shown that a typical format and a Figure 17 who detects control command represents a typical format that detects response command.Detecting control command is made of 25 bytes and detects response command and be made of 17 bytes.Personal computer 1 detects communication session by one a suitable control command that detects is dealt into recording/reproducing apparatus 20A (20B), the content-data that actual reproduction will transmit from PC so that these parts will have the regeneration right.According to the control command that detects that receives, recording/reproducing apparatus 20A (20B) carries out corresponding processing and a relevant response command that detects is turned back to personal computer 1.

Detect control command, as shown in figure 16, operation code with appointment " detecting ", together with the data bit of specifying " result " (communication), " tabulation ID " (the ID codes of the parts of communicating by letter) with it, " object's position number " (orbit number that detects content-data on the second storage medium end) and " DESCBC (Ks, 0) " (representing an encrypted session key).

As shown in figure 17, detect the operation code that response command has an appointment " detecting ", together with the data bit of specifying " result " (communication), " tabulation ID " (ID codes of the parts of communicating by letter) with it, " object's position number " (orbit number that detects content-data on the second storage medium end).

Figure 18 has shown typical form of be made up of 30 bytes one a record object control command and Figure 19 example typical form that writes down the object response command of forming by 62 bytes.Be used for a communication session that detects transmission whole, the signal of record object control command be transported to recording/reproducing apparatus 20A (20B) by personal computer 1.Order offers device 20A (20B) with relevant information by the actual content-data that transmits.

Given record object control command, recording/reproducing apparatus 20A (20B) carries out the information processing of reflection report.Successively, device 20A (20B) sends one and detects response command to personal computer 1.The content-data that device 20A uses part to transmit produces a content ID, and this is discussed below.The content ID that service recorder object response command produces can be reported to personal computer 1.

As shown in figure 18, record object control command has an operation code of appointment " record object ", together with the data bit of specifying " result " (communication), " communication identifier list ID " (ID codes of the parts of communicating by letter) with it, " new object's position number " (orbit number that detects content-data on the second storage medium end), " content type " (content-data), " download formats track attribute " (the content-data form on the main storage medium end), " track mode " (contents attribute that is used for second storage medium), " content size " (data length of content-data), " bulk data size " (content-data).

Content-data form on the main storage medium end (just, download formats track attribute) forms by the information of relevant compression standard and the bit rate of object content data, the object content data are maintained at HDD5 and go up and be sent out, and when they were placed on the transmission line, the relevant compression standard and the bit rate of content-data were effective.

The contents attribute (track mode) that is used for second storage medium is made of attribute information, such as at the compression standard that records mini disk 100 regulation, the design of stereo or monaural and other.Compression standard can be illustrated is any among the ATRAC3 of the ATRAC3 of ATRAC, 132kbps and 66kbps.

Same, as shown in figure 19, record object response command has an operation code of appointment " record object ", together with the data bit of specifying " result " (communication), " communication identifier list ID " (ID codes of the parts of communicating by letter) with it, " new object's position number " (orbit number that detects content-data on the second storage medium end), " content type " (content-data), " download formats track attribute " (the content-data form on the main storage medium end), " track mode " (contents attribute that is used for second storage medium), " content size " (data length of content-data), " bulk data size " (content-data).In response command,, be used to hold a content ID calculating by recording/reproducing apparatus 20A session data, thereby this zone offers computer 1 content id information as the 32-byte particularly including a zone.Content ID will be described in detail in the back.

Figure 20 has shown typical form of the control command that checks in and the typical format that Figure 22 represents the response command that checks in.The control command that checks in is made of 17 bytes and the response command that checks in is made of 25 bytes.Personal computer 1 sends a suitable control command that checks in to recording/reproducing apparatus 20A (20B) by a communication session, and right will be come the reproducing contents data so that these parts will return regeneration, whereby the data that check in and be concerned about from second storage medium.In addition, personal computer also sends and checks in control command so that obtain special information from second storage medium.

According to the control command that checks in that receives, recording/reproducing apparatus 20A (20B) carries out and handles and return a relevant response command that checks in accordingly to personal computer 1.

As shown in figure 20, the control command that checks in has the operation code that appointment " checks in ", together with the data bit of specifying " result " (communication), " subfunction " (definition below), " tabulation ID " (the ID codes of the parts of communicating by letter with it) and " object's position number " (orbit number of the content-data that checks on the second storage medium end).

Defined as example among Figure 21, subfunction has been stipulated the content by the command request that checks in.If subfunction has a value " 00h ", mean that the control command that checks in just asking a content ID.This is actually a request of checking in, and it makes the second storage medium processing unit return the regeneration right.

The value of subfunction " 01h " is retained, and in fact can utilize this value to be used to specify the relevant actual certain content that checks in and handle.

Not a top fixed value if subfunction has, this means the control command request prepaid information that checks in.The back is the special information that is recorded on second storage medium with the prepaid information of discussing.In the case, the control command that checks in is specified retrieval prepaid information and do not need to check in (just returning the right of regenerating from the second storage medium processing unit) separately.Also can define and be used for from the second storage medium processing unit request such as the specific information of user profile and user mode rather than a sub-functional value of prepaid information.

As shown in figure 22, the response command that checks in has the operation code that appointment " checks in ", together with the data bit of specifying " result " (communication), " subfunction " (definition below), " tabulation ID " (the ID codes of the parts of communicating by letter with it) and " object's position number " (orbit number of the content-data that checks on the second storage medium end).In addition, also being included in the response command that checks in is Eight characters joint zone " hash MAC ", and its notice personal computer 1 is handled a content ID who produces by a hash information function.It should be noted to have only when subfunction has value " 00h " in the control command that checking in, just check in when transmitting when one that content ID just is placed in this Eight characters joint zone that is used for communicating by letter by actual finishing.

The value of the subfunction if check in the control command is such as being the request prepaid information, and as shown in figure 23, prepaid information is loaded in the last Eight characters joint of the response command that checks in, so that be transferred to personal computer 1.

Figure 24 has shown that typical form of a dedicated registration control command and Figure 25 represent a special-purpose typical format of nullifying response command.Use these orders so that on recording/reproducing apparatus 20A, realize special-purpose control by personal computer 1.

By using " subelement type " and " subelement ID " bit, the parts under the dedicated registration control command specified control.Use " priority " byte to come the specified control grade.Specify the special-purpose special use control of control command cancellation on recording/reproducing apparatus 20A of nullifying.Use this order, " priority " byte is set to " 00h ", and the expression controlling grade is in a kind of free state.

The dedicated registration control command is used to forbid or retrains recording/reproducing apparatus 20A wiping such operation, or on second storage medium other editor of content-data, the ejection of dish media, applied power source.In other words, specify this order handle assembly 20A to be placed on a kind of state, can control by the appointment of personal computer 1.

In the dedicated registration control command " " byte can according to value change so that forbid or retrain the different operation of recording/reproducing apparatus 20A priority.Signal, value is set to " priority " byte inhibiting apparatus 20A response other any order except those orders of personal computer 1 of controlling grade 4; The power supply opening of controlled stage 3 inhibiting apparatus 20A and closing, the ejection tray media is perhaps divided, and combination or deletion track are except under the control of personal computer 1; The priority that is used for controlled stage 2 is provided with inhibiting apparatus 20A and divides, makes up or the deletion track, except under the control of personal computer 1; The priority that is used for controlled stage 1 is provided with and allows device 20A to edit or delete not constitute the track that detects content-data; The priority that is used for controlled stage 0 is provided with and allows these all constraints of device 20A.The definition of the above-mentioned controlled stage that provides just for exemplary purposes; If desired, can change the number of controlled stage and their details.

10. the transmission that detects and check in of content

When content-data when the HDD5 auto levelizer 20A of PC1 is detected and tested fashionable from device 20A when detecting content-data, finish the typical step that describes below by personal computer 1 and recording/reproducing apparatus 20A.Although in whole communication session, there are a plurality of content data item to be checked in usually or are detected, in the simplification of describing subsequently and the purpose of example, only suppose that a single content data item is detected or checks in.

Figure 26 and 27 has shown and has been used for a step that is performed that detects transmission.In Figure 26 and 27, represent by reference number F101-F111 and represent by the system control unit 32 of recording/reproducing apparatus 20A, the step that decrypting device 28 is carried out by reference number F201-F215 by the controlled step that the CPU2 of personal computer 1 finishes.The response command that uses various control commands and responsing control command to be sent is realized communication session.

A given content data item that transmits from HDD 5 to recording/reproducing apparatus 20A, CPU 2 handles in the checking of step F 101 initial request starting apparatus 20A.Clearly, CPU 2 sends a checking beginning control command auto levelizer 20A.Successively, recording/reproducing apparatus 20A arrives step F 201 and the individual is calculated 1 and provides permission and begin checking.Clearly, device 20A sends a checking beginning response command to personal computer 1.

In step F 102, personal computer 1 is from blade ID of recording/reproducing apparatus 20A request.In step F 202, device 20A sends to personal computer 1 to the blade ID that is stored in wherein.Successively, personal computer 1 is checked from the blade ID of device 20A and is had a legal blade ID whether to check that parts are current.

In step F 103, personal computer 1 sends to an EKB of the relevant content-data that is transmitted of recording/reproducing apparatus 20A.According to the EKB that receives, version number's (seeing Fig. 3) that device 20A arrives step F 203 and stores EKB.In step F 204, device 20A compares with the DNK of storage so that retrieve the root key KR of described content-data with the EKB of reception, as in conjunction with the above-mentioned step of Figure 15 (1) and (2), and then stores the root key KR of acquisition by above-mentioned mode.In step F 205, device 20A notice personal computer 1 by retrieval root key KR.

Use the root key KR of the retrieval of confirming, personal computer 1 arrives the session that detects of step F 104 and a reality of request beginning.Successively, recording/reproducing apparatus 20A arrives step F 206 and confirms to begin to detect session.Session begins control command and when returning response command, checking described in conjunction with Figure 12 is handled and also is done when sending.Processing comprise determine whether recording/reproducing apparatus 20A be a legitimate device in case decryption content data and record decrypted data to second storage medium that loads.Although do not show in Figure 26, the unsuccessful result that checking is handled obviously can stop detecting session.

In step F 105, personal computer 1 send the relevant content key E that is sent out an encryption of content-data (KR, CK).(ER, CK), recording/reproducing apparatus 20A arrives step F 207 and uses the root key of storage to decipher the content key of this encryption to obtain as the original content key CK in the step (3) of Figure 15 according to the content key E that receives.In step F 208, device 20A notice personal computer 1 has been finished the deciphering of content key CK.

In step F 106, the above-mentioned record object control command that personal computer 1 sends in conjunction with Figure 18 arrives recording/reproducing apparatus 20A.This order is intended to offer the information of the relevant content-data that will be detected of device 20A.Although show, the device 20A of this moment returns a response command (this response command has the form that does not show in Figure 19, one 25 byte format had not both had demonstration yet and do not discussed).

Provide report and response record object control command that content key CK finishes deciphering, personal computer 1 confirms that the preparation on recording/reproducing apparatus 20A end is done so that receive and decipher the content-data that is transmitted.1 of personal computer crosses that of Figure 26 withdraws from " P1 " and the step F 107 that arrives Figure 27.In step F 107, personal computer 1 transmits described content-data.Clearly, (CK A3D) is sent to device 20A to use content key CK content data encrypted E.

For recording/reproducing apparatus 20A part, cross that of Figure 26 withdraws from " R1 " and the step F 209 that arrives Figure 27, device 20A receives the content-data E (CK that sends, A3D), step (4) as Figure 15 is deciphered the data that receive, the content-data A3D of deciphering is write on the mini disk 100, and, produce a content ID based on the content-data of deciphering according to a kind of method that the back will be described in detail.

When having transmitted a single content data item (a for example fragment music) from personal computer 1 and it is intactly write mini disk 100, the U-TOC that coils in this on 100 need be updated.On mini disk 100, be used to manage the start and end address of each storage track of schematically representing snatch of music with the radial U-TOC that is recorded in the dish innermost zone.For any track of regeneration, for the purpose of control, the address of track is retrieved from U-TOC.

Use this embodiment of the present invention, according to finish a single content data item is write on the mini disk 100, the U-TOC in the buffer storage 30 is upgraded separately in step F 210.At this moment, the U-TOC on mini disk 100 also is not updated.According to the renewal of the U-TOC that finishes in buffer storage 30, recording/reproducing apparatus 20A arrives step F 211 and in conjunction with the discussed above of Figure 19 record object response command is sent to personal computer 1.This has just finished for the processing procedure of a content data item being write on the dish.Be reported to personal computer 1 in step F 209 with respect to the content ID that above-mentioned content-data produces.

Be presented the report of content ID, personal computer 1 arrives step F 108, and contents processing ID table.This processing (describing in detail after a while) comprises by personal computer 1 makes the additional given content data item that is stored on the HDD 5 of giving of content ID, with consistent at the content ID that step F 209 produces by recording/reproducing apparatus 20A.

In step F 109, what personal computer 1 transmission was shown in Figure 17 detects control command to recording/reproducing apparatus 20A.In step F 110, personal computer 1 detects the service regeulations of renewal about above-mentioned content-data according to what transmit.More properly, represent the transmission counting of the maximum permission of foregoing data right to be successively decreased one.

This recording/reproducing apparatus 20A carries out by the processing that detects the control command appointment.More properly, this device 20A enters into step F 212, and is updated in the content-data that U-TOC on the mini disk 100 removes to reproduce reproducible record.This refers to, and this device 20A is gone from second storage medium this content-data of regenerating by vesting of right.At this moment, corresponding to above-mentioned content-data, a position d1 is set to 1 in " track mode " byte of U-TOC sector 0, and it refers to this content-data by write-protect.After this detected the U-TOC of transmission in the renewal reflection, recording/reproducing apparatus 20A arrived step F 213, sends and detects response command, and report the end of this processing.This finishes this and detects transmission, i.e. the transmission of content rights.

When finishing when detecting, this personal computer 1 sends the control command of a request end session to recording/reproducing apparatus 20A in step F 111.In step F 214, device 20A returns to 1 one response commands of confirming end session of personal computer.In step F 112, personal computer 1 sends to control command that stops proof procedure of device 20A.In step F 215, device 20A returns a response command of confirming that proof procedure finishes.This has finished the communication steps that detects of whole series.

If a plurality of content data item will be detected by above-mentioned communication session, common as long as root key is all content data item, only need repeating step F105 to F108 and F207 to F211.Here a plurality of content data item that have different EKB versions will be transmitted continuously, and each content data item can transmit together in company with its oneself EKB.

To describe by reference Figure 28 now is how to check in to transmit.In Figure 28, represent by reference number F101 to F156 by the controlled step that the CPU2 of personal computer 1 carries out, and represent by reference number F201 to F257 by the step that the system control unit 32 of recording/reproducing apparatus 20A, decrypting device 28 or the like are carried out.In this case, this communication session also is subjected to using various control command and this control command of response and the influence of the response command that sends.

During the session that checks in, proof procedure, EKB transmit and the starting of root key retrieval is to carry out with method same during detecting.That is, step F 101 to F103 in Figure 28 and F201 to F205 are the same with in Figure 26 those, and represent not to be described further identical processing.

In step F 150, personal computer 1 sends a request and starts the control command of the session that checks in to recording/reproducing apparatus 20A.In step F 250, device 20A returns a response command and gives personal computer 1.And, equally also be performed with reference to the above-mentioned proof procedure that discusses of Figure 12 at this.

The session that checks in begins, and for recording/reproducing apparatus 20A by after the checking rightly, personal computer 1 arrives step F 151, and the content ID of the content-data that is checked in from device 20A request.Illustrative ground, this personal computer 1 request unit 20A number removes to return the content ID of above-mentioned content-data by track designation on mini disk 100.Aspect response, device 20A judges whether that in step F 251 track of this appointment represents to allow the content-data that is checked in.Based on making this judgement in the situation of the write-protect sign in the U-TOC (the position d1 in " track mode ") corresponding to track record.To discuss this deterministic process in more detail after a while.The content-data that this permission is checked in represents to be detected mini disk 100 and not by content edited data on disk.

If this above-mentioned content-data is judged as be fit to be detected, arrive step F 252.In step F 252, this recording/reproducing apparatus 20A prepares to be used for the content ID of above-mentioned content-data.At this, this content ID is calculated or was retrieved from the state of its storage according to former calculating.Also this process will be described in more detail after a while.In step F 253, device 20A sends preparation contents ID to personal computer 1.If find the content-data that can check in, personal computer 1 is notified, and after this carries out an Error processing program.

In step F 152, the content ID that this personal computer 1 check sends.Particularly, this personal computer 1 mates the content ID that passes through generation and send from recording/reproducing apparatus 20A with respect to the content ID that produces and store by PC in for the tables of data of above-mentioned content-data.Carry out this coupling, make the content ID that checks this transmission rightly corresponding to the content-data that will detect.If it is correct that the content ID that sends is judged as being, specify the transmission that checks at step F 153 these personal computers 1 so.If it is wrong that this content ID is originally, carry out an Error processing program so.

This form by with the above-mentioned control command that checks in that discusses with reference to figure 20 of specifying that checks in sends in step F 153.In this checked in control command, this " subfunction " data formation regulation checked in and transmits the value " 00h " (referring to Figure 21) that is performed.Should " tabulation ID " value be the value of a designated recorder/regenerating unit 20A, and the orbit number of the content-data that should " object's position number " value regulation will check in from mini disk 100.

According to the appointment that checks in, this personal computer 1 arrives step F 154, and upgrades the service regeulations about above-mentioned content-data.More properly, the transmission counting that allows of the maximum of the right of the above-mentioned content-data of representative is incremented (promptly recovering).

Subsequently, this recording/reproducing apparatus 20A upgrades the U-TOC data in step F 254.That is, this device 20A upgrades U-TOC sector 0, and the track that checks in is wiped from mini disk 100.Thereby this track is impossible regenerate, and is deprived the regeneration right.In step F 255, this device 20A is sent in the response command that checks in shown in Figure 22 and gives this personal computer 1.This finishes this session that checks in, that is, content rights turns back to this personal computer 1.

When finishing when checking in session, this personal computer 1 sends the control command of a request end session to recording/reproducing apparatus 20A in step F 155.In step F 256, this device 20A sends to 1 one response commands of confirming end session of personal computer.In step F 156, this personal computer 1 sends to control command that stops proof procedure of device 20A.In step F 257, this device 20A returns a response command of confirming that proof procedure finishes.This has finished the communication steps that checks in of whole series.

If a plurality of content data item will be checked in continuously by above-mentioned communication session, only need repeating step F151 to F154 and F251 to F255 to remove to verify the content ID of each content data item that is used to relate to, and go to provide the appointment that checks in for each content data item.

11. be used to produce scheme with organize content ID

To detecting and these service regeulations of the session that checks in are to use its content ID for the content data item management.As mentioned above, the record format that the second storage medium utilization that adapts to SDMI wherein can memory contents ID.During detecting or checking in session, each of the recording/reproducing apparatus 20B of personal computer 1 and adaptation SDMI can be discerned the arbitrary content data item of being considered by utilizing the content ID for this project that is produced by personal computer 1.

But this is not to handle the mini disk 100 or the similar situation of general acceptable second storage medium with recording/reproducing apparatus 20A.Mini disk 100 does not keep the zone that the content ID of the content-data that detects is write down in identification thereon.Even reserve to illustrative a new zone in U-TOC, and content ID write to this zone, and when they upgraded U-TOC, these contents ID was wiped free of by the small-sized disc recording-member of routine.On this mini disk 100, have no idea to manage this content ID.If can not be managed at the second storage medium end content ID, content-data can detect to media, but they can not be checked in, and are impossible because verify their sign.

If recording/reproducing apparatus 20A removes to produce a content ID based on each above-mentioned content data item to output capacity, above-mentioned is difficult out in the cold.For personal computer 1 part, a tables of data should be provided, wherein the first content ID that is used for given content data item that produces by personal computer 1 by with mate by the device second content ID that 20A produced.

To describe now by recording/reproducing apparatus 20A and how produce a content ID.Produce a content ID by length (being content size) and its orbit information illustrative ground of checking the content data item of deciphering, and be used for CBC MAC estimation by the distinctive data of sampling from content stream data.

Figure 29 schematically represents the integral body of a content data item (for example a slice music).During detecting session, being illustrated property of content data item ground sends, deciphers and here illustrate as part A TRAC or ATRAC3 packed data stream by personal computer 1.Point P1 and being illustrated property of P2 ground with respect to this content stream data as the sampled point setting.Voice unit (shade shown in Figure 29) data are extracted from these sampled points.Each voice unit can equal to constitute by above-mentioned described 424 byte datas of explaining with reference to figure 8 of a voice group.This voice unit can be apparently be established with any other method of expectation.

This content ID is used the partial content data computation of sampling as mentioned above.Sampled point should preferably avoid content data item originally and terminal because these parts tend to comprise noiseless data.In addition, not one but two sampled point P1 and P2 in order to improve the probability of the unique data that obtain sampling from the target data item, should preferably to set up.Take these measures to guarantee that content ID has estimated the effect of the item identifier of sufficiently useful project side.Apparently, also can set up three or more sampled points.But in fact, single sampled point can provide enough purposes alone, as long as avoid setting up sampled point at the beginning and the end of every melody.

Sampled point P1 and P2 rather than randomly preferably are set in position, and each is defined as the fixed ratio of the length (data volume) of above-mentioned content data item.When its with the fixed sample point sampling time, the number of times of the content ID that no matter calculates, any specific content data item draws identical content ID.In other words, even content ID is not retained on second storage medium, as long as content-data is recorded thereon, identical content ID can be from calculating with the sampled point of setting up for the constant relationship of content-data.This has eliminated recorded content ID to the needs that are used for the mini disk 100 of content recognition purpose as second storage medium.

More properly, sampled point P1 and P2 can be separately positioned on the position with respect to amount of content data (length) 1/3rd and 2/3rds ratios.But this is not restricted to the present invention.Can select other all relative position points with respect to known data length, for example in 1/2nd positions, 1/4th positions, 3/4ths positions, 1/5th positions, 2/5ths positions, 3/5ths positions, 4/5ths positions, sixth position, 5/6ths positions or the like.

What be described below is that a kind of representative passing through applies hash function to content-data, is used to obtain the method for content ID.Following expression (1) general introduction this method:

Content ID=

CBC_MAC (cipher key Hash, IV, stream (P1) // stream (P2)) ... (1) here, eight key datas that byte is unique of " cipher key Hash " expression, " stream (P1) " representative is in the voice group data of sampled point P1 sampling, and " stream (P2) " is illustrated in the data in the voice group of sampled point P2 sampling.Double slashes " // " expression combination.That is, term " stream (P1) // stream (P2) " expression is combined in the data of sampled point P1 and two voice unit 424 * 2 bytes of P2.Eight byte initial values of a CBC mode of value " IV " expression.This value is provided by expression formula (2) by a content size " length " and a byte orbit information " TrackModeByte " that uses four bytes below:

IV＝

{ length//TrackModeByte//32 bits fill zero } ... (2)

Here, four byte content sizes " length " and a byte orbit information " TrackModeByte " can be by the content size " content size " and a byte track pattern " track mode " expressions of four bytes reporting in record object control command shown in Figure 18.

Above-mentioned content ID generation is to be inserted in the influence of the hash engine in the decrypting device 28 of recording/reproducing apparatus 20A with being subjected to illustrative.As by above-mentioned expression formula (1) and (2) expression, during detecting session, when receiving record object control command (in the step F 106 of Figure 26), this device 20A can calculated value " IV ".Because before this content-data of transmission, can know this content-data length from " content size " data record object control command, inspection example such as illustrative ground are possible at sampled point P1 and the P2 with respect to these content-data length 1/3rd proportional positions and the foundation of 2/3rds proportional positions.This shows, beginning that this content-data transmits and after sampled point P1 and P2 data from the sample survey, only can calculate this content ID based on above-mentioned expression formula (1).

Since be recorded on the mini disk 100 can conspicuous content-data size be from the data computation of U-TOC sector 0, the position of sampled point P1 and P2 can be determined in view of the above.During detecting session, " track mode " data of reporting in record object control command are written in the track mode zone in the U-TOC sector 0.Therefore, the U-TOC data allow to estimate based on above-mentioned expression formula (2).Therefore, the content ID that provides content data item that is recorded on this mini disk 100 can in time be calculated at any point.

In aforesaid mode, this recording/reproducing apparatus 20A can produce the content ID of the content-data that has detected individually.For the use of reality, these contents ID must be suitably interrelates with other that produce and the content ID that keep on hard disk drive 5 by personal computer 1.

The content ID that keeps on the HDD 5 with respect to content-data by personal computer 1 on the application program of operation produce.This content ID that is obtained by application program is by constituting for the customizing messages that is equipped with such as the main storage media parts (for example, PC 1) of HDD 5.Above-mentioned distinctive information comprises a unique ID who is installed in the application program in these parts, and is retained in temporal information and random number on this HDD 5.

This content ID (that is first content ID) that is produced by personal computer 1 is arranged with the content ID (that is second content ID) in the tables of data of PC end as shown in figure 30 that is produced by recording/reproducing apparatus 20A corresponding.Therefore the data in the table by the parts of the main storage media that has only equipment such as HDD 5 just by data combination formed.

During detecting session, this content ID that is produced by recording/reproducing apparatus 20A is used record object response command in the step F 211 of Figure 27 and reports to personal computer 1.This personal computer 1 is handled its table data in the step F 108 of Figure 27.These steps are performed to be created in the composition of the table data shown in Figure 30, for the content-data that will detect, to mate the mode of this content ID that is produced by personal computer 1 with respect to the content ID that is produced for above-mentioned content-data by device 20A.Figure 30 illustrates three content data item, and each is relevant with the first and second content ID.

When above-mentioned table data were by personal computer 1 (for example, record and renewal on HDD 5) management, this content-data that detects for mini disk 100 can use this content ID management.So, detect and check in and transmit and correctly to manage.When mini disk 100 did not have the space to remove to keep content ID, this recording/reproducing apparatus 20A can calculate content ID for the content-data of record on disk 100.

In above-mentioned the setting, when personal computer 1 will check in a given content data item, this PC request recording/reproducing apparatus 20A removed to send a second content ID about above-mentioned content-data.In case receive the second content ID of transmission, this personal computer 1 relatively receive with the table of sending and remaining on Figure 30 when previous the detecting from parts 20 back to second content ID.Under the situation of mating in comparison, this personal computer 1 uses first content ID to enter this content data item that checks in and manage on the PC side.These processes are particularly corresponding to step F 151, F152, F252 and the F253 of Figure 28.

As mentioned above, above-mentioned this content ID management method allows system of the present invention to be suitable for providing and detects/check in management, that is, and and the management of the content rights on non-adaptation SDMI second storage medium (such as mini disk 100).

12. detect the back and check in the preceding process that produces content ID

Exist two kinds of occasions to need recording/reproducing apparatus 20A to produce content ID: ought detect (promptly here, by utilizing record object response command to send, make personal computer 1 can carry out table data management as shown in figure 30) after, a content ID will be sent to personal computer 1; And when a content ID be when being used to check in purpose by personal computer 1 request.

Discuss as above-mentioned, this content ID is to use the partial content data extracted from sampled point P1 and P2 to produce.This shows that for detecting transmission after the content-data that transmits from personal computer 1 has been write to mini disk 100, common measure will comprise at first from sampled point P1 and P2 sampled data, secondly based on content ID of data computation of this sampling.When transmitting when checking in, common measure also will comprise response from the request that content ID is provided of personal computer 1 at first from sampled point P1 on mini disk 100 and P2 sampled data, secondly based on content ID of data computation of this sampling.

But above-mentioned measure needs to enter and retrieve data from mini disk 100 during detecting session.This has increased needs to calculate the time of content ID, and elongates the whole call duration time that detects.In addition, during the session that checks in, response PC is necessary from mini disk 100 visit and retrieve data for the request of content ID.This has also increased needs to calculate the time of content ID, and has elongated the whole call duration time that checks in.

According to the present invention, the step that is discussed below can be carried out in more effective, time saving mode and calculate content ID.

Figure 31 is a flow chart of steps, and wherein recording/reproducing apparatus 20A produces a content ID (CID) during detecting session.These steps constitute the process of details of being carried out in the step F 209 of Figure 27 by system control component 32 and decrypting device 28.

In the step F 106 of Figure 26, this personal computer 1 just sent to a record of recording/reproducing apparatus 20A object control command before transmitting content-data.Step F 106 back of Figure 27 are F209 in steps, is used for content ID and produces, and step F 209 is decomposed into step shown in Figure 31.In the step F 301 of Figure 31, the length of the given content data item that transmit (that is size of data) is by from the data detection the record object control command that receives.In step F 302, based on the sampled point P1 and the P2 of this content-data length computation content stream data.

In step F 303, begin to receive this above-mentioned content data item.More properly, as above discuss in conjunction with the block diagram of Fig. 7, this content data item begins to receive, deciphers, as putting into buffer storage 30 by the ATRAC3 data of encoder/decoder 24 codings, and writes mini disk 100 by read/write unit 25.

In reception, deciphering, the buffering of content-data, encode and write during, monitored from the data of sampled point P1.In step F 304, from the voice unit data check of sampled point P1 with in buffer storage 30, being subjected to illustrative.If should check successfully, the voice unit data are placed into another zone of leaving the data flow that is cushioned in the buffer storage 30.

Along with carrying out monitoring continuously, arrive step F 305, wherein the voice unit data from sampled point P2 are positioned in check with going illustrative in the buffer storage 30.If should check successfully, the voice unit data also are placed into another zone of the data flow of leaving buffering in the buffer storage 30.

In step F 306, finish above-mentioned content data item reception, deciphering, buffering, encode and write.Be written to mini disk 100 with content-data, arrive step F 307, wherein the hash engine in decrypting device 28 is from 30 retrievals of buffering memory from sampled point P1 with the data that obtain of P2.This data retrieved plays a part to use the above-mentioned expression formula that illustrates (1) and (2) to be used to calculate content ID basis.In step F 308, the content ID of this calculating is set in the record object response command.Step F 211 these record object response commands at Figure 27 are sent to personal computer 1.

In above-mentioned step, writing content-data before the mini disk 100, be retained and be stored in the memory from the data of sampled point P1 and P2.This refer to when carry out manage from the search disk sampling number according to the time, when content ID estimates, needn't place mini disk 100 at regeneration mode.This makes that content ID computational process is very effective, and has correspondingly shortened and detect Session Time.

Figure 32 A and 32B are when request checks in, are used for promptly sending the flow chart of steps of a content ID.A content ID can calculate on two states: the content data item of being considered is recorded, and the length of this above-mentioned content data item and track are verified.In other words, if content data item in U-TOC sector 0 and related data are retrieved from mini disk 100, data can be sampled from the sampled point P1 and the P2 of content so, and can calculate content ID in view of the above.

Therefore consider that the flow chart of Figure 32 A provides step,, perhaps keep loading that promptly when the TOC data were read out, data were sampled at sampled point P1 and P2 when power supply is applied in mini disk 100 in case wherein mini disk 100 is loaded.

In the step F 401 of Figure 32 A, the TOC data are retrieved.In step F 402, variable n is set to 1.In step F 403, for track #n calculating sampling point P1 and P2 (#n represents orbit number, that is, beginning is expressed as first track).Because the data in U-TOC sector 0 are retrieved, and easily calculate this two some P1 and P2 for this track.In step F 404, be actually from mini disk 100 retrievals at sampled point P1 and P2 with respect to the data of track #n, and put into the specific zone of buffer storage 30.

In step F 405, detect and look at whether variable n represents last orbit number.Situation arrives step F 406 if not so, and wherein variable n increases progressively 1.Step F 406 is then got back to step F 403.Calculate sampled point P1 and the P2 that is used for track #n (that is, being second track specifically) then.After this, in sampled point P1 and P2 data from the sample survey, and storage is advanced in the buffer storage 30.That is, constituting a loop by step F 403 to F406 carries out at all tracks that keep on mini disk 100.The length of each track is used for calculating sampling point P1 and P2, and therefrom data are sampled and put into this buffer storage 30.When all tracks were treated, step F 405 went to stop this process succeeded by an action.

If personal computer 1 is from content ID of recording/reproducing apparatus 20A request, as Figure 28 in step F 151, the step F 252 of Figure 28 is carried out by this device 20A then, step F 252 is decomposed in the detailed description step shown in Figure 32 B.In the step F 451 of Figure 32 B, in the data of the sampled point P1 of the track of orbit number and P2 with request by from 30 retrievals of buffering memory.In step F 452, the hash engine in decrypting device 28 calculates a content ID based on this data retrieved.Can know from the U-TOC data that are placed on already the buffer storage 30 at this moment in above-mentioned track mode and the length that is used for the content-data that expression formula (1) that content ID calculates and (2) need.In step F 453, the content ID of this generation is set in the response command.In the step F 253 of Figure 28, this response command is sent to personal computer 1.

In the time of personal computer 1 request content ID, above-mentioned step has been eliminated needs device 20A from the data of mini disk 100 retrievals at sampled point P1 and P2.This helps to reduce the time that cost goes to respond the PC request that is used for content ID.The whole call duration time of session needs of being used to check in has been shortened considerablely.

Can be in the step shown in Figure 32 A and the 32B alternatively by those replacements in Figure 33 A and 33B.In Figure 32 A, 32B, 33A and 33B, identical reference number is specified identical or corresponding step, the explanation of omitting its redundancy below.In the step F 403 of Figure 33 A, calculate sampled point P1 and the P2 of track #n.In step F 410, retrieved from mini disk 100 in the data of sampled point P1 and P2.This data retrieved is provided for the hash engine in decrypting device 28.In step F 411, based on content ID of this data computation that provides.So this content ID that calculates is placed in the buffer storage 30.

Above-mentioned step is carried out at remaining on tracks all on the mini disk 100.That is, content ID is produced and is stored in the buffer storage 30 in advance.

When by content ID of personal computer 1 request the time, the step F 252 of Figure 28 is carried out shown in Figure 33 B.In the step F 461 of Figure 33 B, have request orbit number track content ID by from the buffering memory 30 retrieval.In step F 462, this content retrieved ID is set in the response command.This response command is sent to personal computer 1 in the step F 253 of Figure 28.

When ID is by personal computer 1 request the time, above-mentioned step has been eliminated needs recording/reproducing apparatus 20A to read in the data of sampled point P1 and P2 and calculate content ID from mini disk 100.This further reduces the cost that is used for content ID response PC request time.

After reading the TOC data from mini disk 100, the step in Figure 32 A or 33A can be carried out by recording/reproducing apparatus 20A.In other words, these steps can read or keep handling or carry out during any suitable free time.Because content-data reads with high transfer rate with in intermittent mode from mini disk, can be with in the free time data from the sample survey of carrying out off and between the read operation at sampled point P1 and P2.In a word, before being asked for content ID by personal computer 1, this session that checks in is more effectively to implement when being performed than previous step as Figure 32 A or 33A.13. content is write controlled flag

When the step in Figure 26 and 27 detected given content data item, on mini disk 100 sides, as mentioned above, the position d1 in track mode data was set to 1 in U-TOC sector 0 and is used for above-mentioned content data item.This d1 plays a part to write controlled flag for the content-data that detects that writes mini disk 100.

For the mini disk system, this d1 works to be commonly called the write-protect sign.All tracks that this d1 is set are under an embargo and wipe, decompose, make up or other editor.This is applicable to the recording/reproducing apparatus 20A that takes on the mini disk recording-member, and is applicable to that having of other generally can accept conventional mini disk recording-member now.

But in fact, this d1 can not be provided with to mini disk 100 for all track record by the mini disk system on own ground.This d1 not only can be used as the usefulness of the write-protect sign of given track, and the content data item that writes on the track as declaration is an information that has detected from personal computer 1.

System of the present invention utilizes this d1 as writing controlled flag, forbids detecting the editor of content-data.According to the request of the session that is used to check in, system of the present invention also detects this d1 and goes to determine whether that the track by this bit representation is before to detect rightly.

When detecting content data item when checking in one, the data item of preferably returning from the data management angle accurately be retained in the PC side on data item consistent.As mentioned above, the content-based data length of this recording/reproducing apparatus 20A uses this content of the data computation ID that is obtained by sampled point P1 and P2.If change, produce that in fact identical content ID is impossible when detecting owing to divide or make up this content-data length.In other words, based on this content ID mismatch, edit this and detect content-data and will make that the management of gratifying service regeulations is impossible.If this generation, this system can not accept the content-data that checks in, and check in and the correct service regeulations management principle of tolerance content edited data are moved on the contrary.Therefore suggestion forbids editing all content-datas that detects on mini disk 100.

Figure 34 illustrates this and writes controlled flag and typically how to be handled by recording/reproducing apparatus 20A.In Figure 34, reference character WPF represents the write-protect sign, that is, and and the position d1 of 0 middle orbit mode data in the U-TOC sector.For a content data item that detects and be written on the mini disk 100, during the step F 212 of Figure 27 is upgraded the U-TOC data, this write-protect sign WPF be opened (S100).Do not detect but anyly be written in content data item on the mini disk 100 (data that so write are known as the content-data of oneself record below) from different information sources for all by recording/reproducing apparatus 20A or by other mini disk recording-member by this system, this sign WPF keeps closing (S105).

As control measures, all content data item (track) that write-protect sign WPF is opened can forbid editing fully, so that allow follow-up checking in.Another control measures can be included in and provide he or her warning, if edit, all follow-up checking in after invalid allow the user to edit the content of being considered.

For forbidding that this system control unit 32 enters all edit commands (S101) that refusal can send for given content data item detecting editor total on the content-data.In this case, this detects content-data and can not edit by any way.This write-protect sign WPF stays open (S101 to S104).

The content-data that oneself writes down keeps freely can editing (S106).Provide edit commands from the user or from other information sources, the content-data that these system control unit 32 order MD control units 21 editors are considered, and upgrade U-TOC in view of the above.Executive editor whether, this write-protect sign WPF keeps closing (S105 to S104, perhaps S105 to S106 is to S104) for all own recorded content data.

May wish to allow and detect content-data and after above-described warning, edited.Under the sort of situation, what 32 responses of this system control unit were all may make a display unit (not shown in Figure 7) remove to send an alert message (S102) from the user or from the edit commands of other information sources.This message is gone to warn the user finally can not utilize after editor with the words expression and is checked in.

If the user answers this this edit commands of warning cancellation, (S102 to S104) can not take place in editor apparently so.If the user enters editing data regardless of this warning, this user is considered to accept contingent thing so, and the data that allow editor to be considered under the condition that data will no longer check in.That is, these system control unit 32 order MD control units 21 editor's conducts are specified the content-data of being considered by the user or by other information sources, and upgrade U-TOC in view of the above.In this case, be used for the write-protect sign WPF with editor's track, specifically the position d1 in the track mode data in U-TOC sector 0 is closed (S103).

The step that above causes is summarized as follows: as long as they are not edited, be opened for all this write-protect sign of content-data WPF that detects.No matter they whether edits, detect content-data and all content-datas that oneself writes down for what edited, this sign WPF is closed.Therefore consider; during the session that checks in; when personal computer 1 the step F 151 of Figure 28 will check in the content ID of any content data item from recording/reproducing apparatus 20A request when, this device 20A opens at the protective emblem WPF (d1) whether 251 of step F need write on for this object content data detection in the 0 middle orbit mode data of U-TOC sector.

If for the content data item of the content ID that has asked, this sign WPF closes, this recording/reproducing apparatus 20A only notify personal computer 1 this to check in be impossible realize.This has eliminated in the mode of final waste and has carried out the step F 253 of Figure 28 and the needs of F152, that is, make this content ID with check of report cause the refusal that finally checks in.That is, the step F 253 of Figure 28 and F152 only are used for content ID check to the content-data execution that detects of not editing.Therefore the detour of waste is avoided, and check in communication session and the more effectively enforcement before of ID checkout procedure ratio.

Basically, the content-data that oneself writes down keeps freely can editing.But, exist the content-data wherein detect content-data and own record to reside in situation on the mini disk 100, and wherein also wish the free editor of the content-data that restriction oneself is write down with hybrid mode.For example, by utilizing the application program of an operation on personal computer 1, may wish to manage the content-data that is retained on the mini disk 100.The above-mentioned restrictive editor of content-data who oneself writes down uses the registration control command of a unique Figure 24 and the cancellation control command of a unique Figure 25 to realize by system of the present invention.These orders allow personal computer 1 to go to implement special-purpose control on recording/reproducing apparatus 20A.

The unique registration control command that sends Figure 24 when personal computer 1 is to recording/reproducing apparatus 20A the time, and according to the value that is made of " priority " data in this order, this system control unit 32 enters editor to be forbidden/unrestricted model.In fact by means of this pattern, as shown in figure 34, forbidden or limited (S107) as editor by the content of oneself record of user's appointment.The operation (comprising opening power and eject disk) that reaches this user's startup of what degree is rejected, and according to the value of " priority " in this unique registration control command, the value of being somebody's turn to do " priority " is set up a previous controlling level of discussing.

When this unique cancellation control command is sent out, up to now at forbidding of adopting of editor or limit raised.The content-data of this permission oneself record goes to become and can edit (S107 to S106).

Aforesaid, this unique registration control command provides the control of personal computer 1 for recording/reproducing apparatus 20A special use.According to the editor of the meaning of this system control allow this system with than in the past more easily mode operate.

14. charging information is handled

How the system that will describe invention now handles charging information.Figure 36 has described a kind of record keeping processing exemplary systems structure relevant with the content-data that distributes that be used to carry out.This system configuration is identical with structure among Fig. 4 its configuration aspects illustrates details more except content server 91.

As discussed above, system of the present invention can download content-data such as melodies to main storage media (HDD 5) from content server 91, and can detect data downloaded to second storage medium (mini disk 100).This content server 91 can provide the content-data conduct based on the service of paying dues.

This content server 91 is managed by a mechanism or is provided service by an individual implementation content.Basically, this content server 91 comprises three functions: the content reservation function, accumulate different types of content-data; Content provides function, provides the content-data of reservation to personal computer 1 by communication link through network 110; And accounting feature, management is about the charging information of user's received content data.A little functions can be used as integral body and are managed by single mechanism, single company or the like.In other words, this function can be managed with good coordination mode by different mechanisms, manufacturer or individual respectively.For example, this function can each moved as the site on the internet, and can coordinate by link.

Mini disk of equipping on user side 100 and storage card are used as second storage medium above describing, and finally go the recorded content data thereon.This second storage medium has the prepaid information that writes down in the mode that can't write out thereon, describes after a while.When handling the charging information of relevant private subscribers, this content server 91 receives this prepaid information from this second storage medium.

This content server 91 is made up of a network allocation unit 130, content data base control unit 140, user profile unit 150, content data base 160 and customer data base 170.This network allocation unit 130 is carried out content provides function, and the content-data of reservation is assigned to personal computer 1 etc. through network 110.This content data base control unit 140 and content data base 160 reach the content reservation function, store different types of content-data whereby.User profile unit 150 and customer data base 170 realized accounting features, is used to implement the accounting management at the user who receives the content-data that distributes.

Lot of data are stored by this content data base 160 that the above-mentioned storage medium as hard disc or CD constitutes, such as the music content data that are ready to distribute to the user with the music libraries form in illustrative ground.This content data base control unit 140 makes this content data base 160 go record, retrieval or control content data.For example, provide a request from network allocation unit 130, this content data base control unit 140 makes content data base 160 remove the content-data of retrieval request, and transmits this data retrieved and give network allocation unit 130.

Illustrative ground has the charging information that checks in corresponding to the prepaid information that is recorded on special-purpose second storage medium 100 thereon by above-mentioned this customer data base 170 that constitutes as hard disc or optical disc storage media.This user profile unit 150 makes customer data base 170 remove registration and retrieval charging information.For example, provide a request from network allocation unit 130, this user profile unit 150 makes customer data base 170 go to check in again charging information or go therefrom to retrieve specific charging information thereon, and the information that this retrieval is provided is to network allocation unit 130.

As mentioned above, these parts of content server 91 can or by single mechanism, company or individual operation, perhaps can be respectively by different organization managements.For example, this network allocation unit 130 can be by the distribution services company management, this content data base control unit 140 and content data base 160 be by record company or record mark company management, and this user profile unit 150 and customer data base 170 are managed by record keeping service establishments.Alternatively, move any one content-data obtained that goes to distribute from these content data bases 160, can set up a plurality of content data base control units 140 and content data base 160 with network allocation unit 130.

In the system of the invention of above-mentioned setting, personal computer 1 is communicated by letter with content server 91, and receives the table (menu) of an effective content-data from this server 91.Given should table, the user carries out operations necessary and goes to select the content data item wanted.Subsequently, this content server 91 sends the content data item of this selection to personal computer 1.This user by above-mentioned discuss detect the content-data that session obtains to be recorded in the reception of second storage medium 100.This allows this user to remove to obtain for example melody of wanting.

Use is handled the therefore charge of the content data item of acquisition from the prepaid information of second storage medium, 100 retrievals.As describing in more detail after a while, each second different storage medium 100 comprises a unique media ID and an advance payment that constitutes the prepaid information part.

This personal computer 1 receives the information of this prepayment from recording/reproducing apparatus 20A (20B), and sends this information to content server 91.This network allocation unit 130 makes customer data base 170 go to implement to keep accounts to handle based on the prepaid information of this reception.In general, customer data base 170 has the charging information of the relevant prepaid information of writing of registration thereon on special-purpose second storage medium 100.When a given content data item was assigned to specific second storage medium, the advance payment within the prepaid information on this media was taken into account the project of this distribution, successively decreases according to predetermined value.That is, the content data item of this distribution is by being updated in applicable charging information in the customer data base 170 and defrayment.The prepaid information of writing on second storage medium 100 is not upgraded.

This customer data base 170 is to hold charging information in the mode shown in Figure 37.This charging information refers to groups of data items, and every group corresponding to a whole prepaid information (for each second storage medium 100).Illustrative ground, a charging information is made up of media ID, remaining sum and purchase history.Figure 37 illustrates the charging information item K1 to K5 that checks in, and each corresponds respectively to media ID is ID1 to ID5.

After a while description is included in media ID corresponding to those charging informations in prepaid information.This remaining sum is represented the current remainder of advance payment, and is successively decreased by the paid charge for the content data item of each purchase.Purchase history is made up of such track record: as the date and time of buying, the title of the content-data of purchase is used for the amount paid of this content-data, and the ID that is used for the outlet terminal of this purchase.In other words, this purchase history constitutes the condition information about buying.

This charging information also can comprise different types of project, such as the initial amount of money of prepayment, and the type of the media of employing, the media seller's title, and for the copyright owner's of the content-data of buying title.Alternatively, this purchase history can be omitted fully.For the content-data by system assignment of the present invention, this charging information should comprise media ID and remaining sum at least; Including of the sundry item of information can decide according to the systematic function angle and according to the service that in fact provides.

As shown in figure 38, on second storage medium 100 unchangeably this prepaid information of record be to constitute basically by advance payment, prepaid services ID and to the media ID of each project.The quantity that this advance payment representative of consumer has made payment beforehand.When this second storage medium 100 is used as the storage card sale of unused mini disk or blank, that is, have zero record thereon, however its price comprises advance payment.For example, if the second blank storage medium 100 carries Yu Fujine $5 usually, 000 Mai $500, this media is bought Xu Yao $5 basically, 500 by the user so.Obviously, the price of such media 100 can change according to the seller's the meaning, and it can have the tax-free Mai $5 that this media provides itself, and 000, perhaps it can Yi $4,800 the sell at competitive of cutting the price.In a word, buy Xie Dai $5, this user of this second storage medium 100 of 000 advance payment has been provided by the denomination of expression, this content distribution service that can be used for being provided by distribution system of the present invention.

This prepaid services ID represents to provide the address of the content server 91 of content distribution service.This address is that illustrative ground is used for setting up the address of communicating by letter with network allocation unit 130 through network 110, such as the IP address through the internet.In case second storage medium 100 from be carried in recording/reproducing apparatus 20A is received the information of this prepayment, based on the prepaid services ID in this information, this personal computer 1 obtains accessed content server 91 and is used for communication.

According to the structure of content server 91, this prepaid services ID can be the address of content data base control unit 140 or user profile unit 150, rather than the address of network allocation unit 130.For example, hypothetical network allocation units 130, content data base control unit 140 and user profile unit 150 have its webpage of setting up and link through the internet.Under the sort of situation, this prepaid services ID can be the address of content data base control unit 140, allows this personal computer 1 to go to visit this unit 140 and is used for communication.Take on to unify mode with network allocation unit 130 and to control all linkage units, developed into what degree according to this data allocation process, this user profile unit 150 can be connected to present setting.

Select as another, this prepaid services ID can be the address of this user profile unit 150, allows this personal computer 1 to go addressed location 150 to be used for communication.In this case, go to control all linkage units to unify mode with 130 operations of network allocation unit, according to the development of this data allocation process, this content data base control unit 140 can be connected to present setting.

This media ID be one attached to the unique identification on each special-purpose second storage medium 100.For example, if the user buys two second storage mediums 100 as the prepayment media, each still carries different media ID this two media 100.

This prepaid information can be to illustrative to have 8 to distribute to advance payment, gives prepaid services ID for 22 to 32, and 32 to 40 are given media ID.Above-mentioned figure place can be determined according to the pre-paid system design angle.This prepaid services ID can distribute the figure place of an abundance to be used to specify server address.This media ID can distribute some enough big deallocations to give the ID number unique sum of selling the prepayment media from now on to expectation.Eight bytes or near data format in, at least one byte (8) preferably should be distributed to advance payment, three or four byte allocation are given prepaid services ID, and three or four byte allocation are given media ID.

What follows be to be recorded in prepaid information and the relation between the charging information shown in Figure 37 on second storage medium 100 in description.Suppose that the user has bought a media ID and a $5 with ID1, second storage medium 100 of 000 advance payment, and bring into use this media 100.When this second storage medium 100 is used for the first time, in content server 91 sides, the charging information K1 shown in Figure 37 customer data base 170 that checked in.This moment this media ID of checking in remaining sum be with in prepaid information, keep at first those are identical.More properly, this charging information K1 normally is media ID and the $5 by ID1, and 000 remaining sum is formed.

When content data item was subsequently downloaded (promptly detecting) to second storage medium 100, the expense that is used for this content data item was deducted from the remaining sum of charging information K1.Promptly, when every next content data item is downloaded (detecting), this media ID in the prepaid information on second storage medium 100 that loads at present is used as the basis of visit corresponding charging information in customer data base 170, and reduces remaining sum according to the expense of the project that is used for this download at charging information.For example, the Yu E $3 in the charging information K1 of Figure 37, content data item Yi $1 of 700 expressions, 300 price is purchased, and downloads to second storage medium 100 of the media ID with ID1, and the quantity of this purchase is deducted from initial advance payment.

Under aforesaid record keeping processing scheme, the prepaid information on user's oneself second storage medium 100 never is updated.In other words, this prepaid information only need be write on second storage medium 100 unchangeably.Be different from the setting that traditional prepaid information can be updated on second storage medium 100, the solution of the present invention has its unalterable prepaid information on the media of selling, prevent by forging the service of advance payment or media ID abuse, thereby and be attributable to the intervention of prepaid services ID and the prevention system fault.

Exist three kinds of main method to go eight byte prepaid information to be changed as on the mini disk of second storage medium 100:

(1) information of this prepayment of record in P-TOC.

(2) in U-TOC,, this information writes down the information of this prepayment so that exempting the mode of upgrading.

(3) in U-TOC outside in the management area so that the unalterable mode of this information writes down the information of this prepayment.

If the information of this prepayment will be recorded in the P-TOC, eight the suitable byte area in illustrative ground can be distributed in the P-TOC sector of the ingress area shown in Fig. 9 A.This assigned region can be used to hold this prepaid information.

If this prepaid information will be recorded in the U-TOC, for example, it is possible going to utilize unused zone in

formative sector

0,1,2,3 and 4.As another selection, can adopt not formative sector, to eliminate the possibility that prepaid information is distorted.

Illustrative ground, eight byte area in U-TOC sector 5 can be used as the prepaid information posting field to be kept.In this case, a position of representing the sector behaviour in service (that is, " sector of use " position) is set to 0, and it represents that this sector do not use, and prepaid information is exempted upgrade.This indication makes conventional mini disk playing program go to approve that U-TOC sector 5 is unused sectors.This has prevented to carry out any renewal on U-TOC sector 5, keep and can not be changed in this prepaid information of customer-side whereby.Recording/reproducing apparatus 20A of the present invention is used for the dedicated program of prepaid information retrieval by reading U-TOC sector 5 these prepaid information of retrieval.Obviously, sector 5 can be replaced with

sector

6,7 or any other sector and is used to hold this prepaid information.

If will being recorded in the management area shown in Fig. 9 B, this prepaid information, can be used to hold this information such as those shades PD sector in unused grouping shown in this figure so in the U-TOC outside.This management area comprises power calibration area PCA and U-TOC zone.These regional positions are represented in aforesaid mode by P-TOC.Therefore allow conventional mini disk recording-member to go to ingoing power calibration region PCA and U-TOC zone with reference to P-TOC.By compact, the shadow region PD that is not represented by P-TOC can not be entered (that is, being considered to insignificant if enter this zone) by the mini disk recording-member of routine.It refers to this prepaid information that writes and can not be upgraded by the user in the PD of shadow region.

Use a kind of dedicated program that is used for the prepaid information retrieval, this recording/reproducing apparatus 20A of this distribution system can read this prepaid information from this shadow region PD, and the position of this shadow region PD suitably identifies in advance.Illustrative ground, the original position of this shadow region PD can be limited by the initial address of the U-TOC that is supplemented with predetermined side-play amount (representing in P-TOC).This allows the record cell of these parts to go to read this prepaid information.For example, because U-TOC is for three records of trooping, can confirm as the original position of this prepaid information posting field by increasing by five positions of being obtained to U-TOC initial address USTA of trooping.

In the mode of describing, this mini disk can be used as prepayment media 4 and uses.As the prepayment storage medium, this mini disk can be with any other suitable media replacement, comprises storage card and such as CD-R, CD-RW and DVD CD.In these selective media any, have eight bytes or more the record position of the prepaid information of multidata amount can abide by each media and use specific data management format to determine.

Here the above utilizes the type of the data distribution system of prepaid information to be set up, and personal computer 1 need be retrieved this prepaid information by second storage medium (mini disk 100) from be carried in recording/reproducing apparatus 20A.When from this device 20A request prepaid information the time, this personal computer 1 specifies this request in previously with reference to " subfunction " data in Figure 21 and 22 control commands of discussing that check in.When report was carried in this mini disk 100 prepaid information on it and gives personal computer 1, this device 20A utilized the response command that checks in of Figure 23.

Figure 35 outlines the step that is used to handle prepaid information.In Figure 35, represent by reference number F101 to F173 by the controlled step that the CPU2 of personal computer 1 carries out, and represent by reference number F201 to F274 by the step that the system control unit 21 of recording/reproducing apparatus 20A, MD control unit 21 or the like are carried out.This communication session also uses various control command to implement, and responds this control command and give an order.

During session, proof procedure, EKB transmit and the starting of root key retrieval is to carry out with method same during previous detecting of explaining.That is, step F 101 to F103 in Figure 35 and F201 to F205 are with the same at Figure 26 those in 28, and represent not to be described further identical processing.

In step F 170, the control command that queued session of this personal computer 1 transmission begins is to recording/reproducing apparatus 20A.In step F 270, this device 20A returns a response command and gives personal computer 1.At this moment, equally also be performed with reference to the above-mentioned proof procedure that discusses of Figure 12.

Begin and verify fully with recording/reproducing apparatus 20A with session, this personal computer 1 arrives step F 171, and the request prepaid information.That is, PC sends the control command of describing with reference to Figure 20 that checks in.In this order, should " subfunction " data represent neither that " 00h " do not represent " 01h " again, other value (referring to Figure 21) of prepaid information is represented in this data representation request.

One receives this control command that checks in, and this recording/reproducing apparatus 20A reads prepaid information in step F 271 from a zone of clearly distributing on mini disk 100.In step F 272, the prepaid information that will retrieve of this device 20A, for example eight bytes are arranged in as shown in figure 23 the response command that checks in, and send this order and turn back to personal computer 1.

In the prepaid information in receiving the response command that checks in, this personal computer 1 sends the control command of a queued session end to recording/reproducing apparatus 20A in step F 172.In step F 273, this device 20A sends to 1 one response commands of confirming conversation end of personal computer.In step F 173, this personal computer 1 sends to control command that stops proof procedure of device 20A.In step F 274, this device 20A returns a response command of confirming that proof procedure finishes.This has finished the whole continuous communication steps that is used for the prepaid information transmission.

Thereafter, this personal computer 1 makes communication unit 8 be connected to content server 91 through network 110, and sets about transmitting this prepaid information that receives this content server 91.When this prepaid information is sent to content server 91 together in company with the identifying information about the content-data that detects second storage medium 100 when, this server 91 is carried out about applicable user's record keeping and is handled, that is, this server 91 upgrades in the database of Figure 37 accordingly.

Handle therefore based on the accounts of the system of the invention of prepaid information and to carry out, ask this recording/reproducing apparatus 20A to transmit the specific prepaid information of closing second storage medium 100 that loads thereon by personal computer 1.

Though the personal computer 1 that illustrates obtains this prepaid information as unique information from this second storage medium 100, this is not of the present invention restrictive.In other words, control and response command setting can suitably be arranged the feasible various concrete information that obtain.For example, in order to manage this storage medium 100, can obtain to be written in other unique information on second storage medium 100 by personal computer 1, such as user's behaviour in service and user identifier.When sending to content server 91, above-mentioned unique information can provide various services to the user or carry out in the various control measure and used by server 91.

Above-mentioned embodiment that has discussed and example only are illustrative purposes for example, are not in order to limit the present invention.Do not break away from the spirit and scope of the present invention and it is contemplated that and put into practice other the changes and improvements of the present invention that cover above-mentioned system operation aspect, as encryption, data path, detect/check in that session, checking, content ID produce, content ID management, write controlled flag arrangement, editorial management and prepaid information.

This SDMI content-data is not unique data that can be sent to second storage medium by the system of invention from the main storage media.The content-data of other kinds also can be handled in a similar fashion by this system.This main storage media is not limited to HDD, but can be by any other suitable equipment or unit practice.This second storage medium is not limited to mini disk, and this second storage medium processing unit 20A also is not limited to the mini disk recording-member.Illustrative ground, this second storage medium 100 can be any of CD-R, CD-RW, DVD-RAM, DVD-R, DVD-RW and storage card.Therefore, this second storage medium processing unit 20A can be the recording equipment of any and above-mentioned media compatibility.The present invention also goes for the recording/reproducing apparatus 20B of the above-mentioned adaptation SDMI that discusses.That is, transmitting content-data is suitable for using measure management of the present invention for the process of device 20B.

According to described the present invention, by being correlated with corresponding to the first content identifier of the content-data that transmits and the generation of the table data of the second content identifier that transmits from data recording equipment, data link (promptly, equipped the parts of main storage media) the transmission right of the content-data of managed storage, further manage the transmission right that is transferred to the given content-data of data recording equipment (that is the second storage medium processing unit) simultaneously.

Promptly, can be recorded on second storage medium even without content designator (content ID), this content ID (second content identifier) that produces by the second storage medium processing unit be used to be identified on this second storage medium with the relevant content-data of content ID (first content identifier) that keeps by the parts of having equipped the main storage media.Content-based ID detect and the session that checks in during, this feature provides a kind of setting that helps to implement suitable copyright management.In other words, the unencrypted content-data is copied to or during from the regeneration of second storage medium of incompatibility SDMI, copyright management is suitably carried out, and guarantees in user convenience simultaneously here.

As mentioned above, in order to produce the second content identifier via estimation, be used to travel to and fro between this data recording equipment that second storage medium writes with sense data and extract part unencrypted content-data based on the data of extracting.This makes that producing a content ID who has only each content data item to be processed just to have becomes possibility.

Especially, based on its data length, sampled point is set on each content data item in a predefined manner.Extract because the partial content data are the well-defined sampled points from each data item, this unique content ID that obtains from sampled data remains identical.That is, the specific second content identifier that obtains from the content-data on second storage medium is stably available, need not to obtain being stored in the identifier on the media.This identifier of Chan Shenging is favourable especially for the use in copyright management like this.

At least one and preferably a plurality of sampled point are set at each content data item Anywhere, except that the beginning and end of above-mentioned data item.Avoiding the beginning and the end of each content data item is in view of such fact, and promptly these parts, particularly audio content data trend towards comprising noiseless data.The remainder of this content-data normally is different from another of a data item, and is therefore suitable to being used for the data item base of recognition.

When the content-data that comes from data link was recorded in second storage medium, this data recording equipment was written to the controlled flag information that second storage medium represents that above-mentioned content-data has transmitted from data link.This data recording equipment is according to the existence of the controlled flag information of corresponding recorded content data or lack, and further forbids or limits the editor who is recorded in this content-data on second storage medium.These measures make to remain on and detect content-data in case any editor's attempt becomes possibility on second storage medium.When this detected content-data and remains not editor, constant by the second content identifier that keeps being obtained by this content-data, it had simplified the checking of Data Identification when checking in (that is, the regeneration right returns).With the session that detects and check in of the no unpredictability of execution like this, guaranteed the consistency of system operation.

When this data link sends an order (order checks in) when going to eliminate the regeneration right that is recorded in the given content-data on this second storage medium, before determining whether to observe this elimination order, this data recording equipment detects about the existence of the controlled flag information of this above-mentioned content-data or lacks.If applicable content-data is edited, this controlled flag information is eliminated.Because the existence of this controlled flag information or lack expression and whether edit at the content-data of being considered is very easy to determine whether that this content data item can be checked in, and the time of the session needs that are used to check in shortened slightly.Illustrative ground needn't be based on removing to calculate content designator from the data of search disk, and needn't go in view of the above to make data link determine to check in viability of session.

If there is controlled flag information, these content corresponding data need not all be forbidden editing, but can allow to be edited with suitable limited mode.For example, may allow to detect content-data after suitable warning of issue is edited.This can make the user suitably clearly wanted to edit some content-data after the warning.Illustrative ground, if the user does not wish the given content data item that checks in from now on, after affirmation can not check in data by way of caution, content data item can be edited by the user.This feature has improved the facility of User Part.

When an order that is used to forbid or limits any content-data of reference record on second storage medium is sent to data recording equipment by data link, become and to be controlled by data link by the content-data of data recording equipment reference record on second storage medium.This refers to not only that this detects content-data, and is recorded in other content-data on second storage medium respectively and can be subjected to editor and forbids or limit.Here, this data recording equipment (having its second storage medium) plays a system and device, and this feature is by restriction or forbid being recorded in the unconfined editor of data on the media, guarantees the consistency of system operation.

When the order that is used to cancel forbid or limit to be recorded in the content-data on second storage medium is sent to data recording equipment by data recording equipment, may forbid or limit and edit the content-data that on second storage medium, writes by the data recording equipment cancellation.In the time of expectation like this, cancel all makes editor's restriction and allows data recording equipment (having its second storage medium) play self-contained unit to become possibility.

Do not break away from its spirit and scope, can make the many obviously different embodiment of the present invention, should be understood that the present invention is not limited to certain embodiments and removes defined in claims.

Claims

1. data recording equipment that is used for receiving selectively the first content data or the unencrypted second content data of encryption, the data of this reception are recorded in the storage medium that is made of program area and directorial area, and described data recording equipment comprises:

Be used to receive first receiving-member of the first content data of described encryption;

Be used to receive second receiving-member of described unencrypted second content data;

Be used to decipher the deciphering parts of the first content data of the described encryption that receives by described first receiving-member;

Be used for writing down selectively the described second content data that receive by the described first content data of described deciphering parts deciphering or by described second receiving-member recording-member to the described program area of described storage medium, described recording-member further writes down the described management area of an identifier to described storage medium, the first content data of the deciphering of described identifier identification record in the described program area of described storage medium perhaps identify the described second content data that received by described second receiving-member; And

Control assembly, be presented an order that is used for the described content-data of reference record in the described program area of described storage medium, described control assembly allows or forbids editing the content-data of described record according to the described identifier in the described directorial area that is recorded in described storage medium.

2. according to the data recording equipment of claim 1, wherein, described edit commands is specified at least about one in the operation splitting of the content-data of described record, combination operation and the erase operation.

3. data recording equipment that is connected to the data link of the main storage media that is equipped with the first content data of holding encryption through communication line, described data recording equipment exchanges the first content data of described encryption through described communication line and described data link, and described data recording equipment comprises:

First receiving-member is used to receive through the first content data of described communication line from the described encryption of described data link transmission;

Second receiving-member is used to receive unencrypted second content data;

The deciphering parts are used to decipher the first content of the described encryption that is received by described first receiving-member;

Recording-member, be used for writing down selectively the described second content data that receive by the described first content data of described deciphering parts deciphering or by described second receiving-member program area to described storage medium, described recording-member further writes down the directorial area of first identifier to described storage medium, the first content data of the deciphering of the described first identifier identification record in the described program area of described storage medium, the perhaps described second content data that receive by described second receiving-member;

The identifier production part is used for producing second identifier based on the part first content data of described encryption; And

Transmit block is used for sending described second identifier that produced by described identifier production part to described data link through described communication line.

4. according to the data recording equipment of claim 3, wherein said communication line is a general universal serial bus.

5. according to the data recording equipment of claim 3, further comprise control assembly, be presented an order that is used for the described content-data of reference record in the described program area of described storage medium, described control assembly allows or forbids the content-data of reference record according to described first identifier in the described directorial area that is recorded in described storage medium.

6. according to the data recording equipment of claim 5, further comprise:

Decision means, be presented an order that is used for the described content-data of reference record in the described program area of described storage medium, described decision means is based on described first identifier in the described directorial area that is recorded in described storage medium, and judgement will be described first content data or described second content data by the content edited data; And

The announcement parts, if describedly will be judged it will be described first content data by described decision means by the content edited data, described announcement parts announcement is returned described first content data for described data link and will be become impossible after described editor.

7. according to the data recording equipment of claim 6, wherein, if after announcement by described announcement parts, the user adheres to that the executive editor orders, so described control assembly allows the described first content data of editor, and changes described first identifier corresponding to described editor's first content data in view of the above.

8. data recording equipment that is connected to the data link of the main storage media that is equipped with the first content data of holding encryption through communication line, described data recording equipment exchanges the first content data of this encryption through described communication line and described data link, and described data recording equipment comprises:

Second receiving-member is used to receive unencrypted second content data;

The deciphering parts are used to decipher the first content data by the described encryption of described first receiving-member reception;

The identifier production part is used for producing second identifier based on the part first content data of described encryption;

Transmit block is used for sending described second identifier that produced by described identifier production part to described data link through described communication line;

The change parts are edited if be recorded in the first content data of the described deciphering in the described program area of described storage medium, so described first identifier of change record in the described directorial area of described storage medium; And

Control assembly, to turn back to described data link if be recorded in the first content data of the described deciphering in the described program area of described storage medium, matching result between described second identifier that keeps according to described second identifier that keeps by described data link with by described data recording equipment so, the returning of first content data that allows or forbid described deciphering; Wherein, if being judged as, the first content data of the described deciphering of returning edited, so described control assembly is not according to the described result of described coupling, but abide by described first identifier in the described directorial area be recorded in described storage medium, allow or forbid that the described of described first content data returns.

9. according to the data recording equipment of claim 8, wherein said editor refers at least one about the operation splitting of the content-data of described record, combination operation and erase operation.

10. according to the data recording equipment of claim 8, wherein said communication line is a general universal serial bus.

11. data link that is connected to data recording equipment through communication line, be used for receiving selectively the first content data or the unencrypted second content data of encryption, described data link exchanges the first content data of described encryption through described communication line and described data recording equipment, and described data link comprises:

First storage component is used to store the first content data of described encryption;

Transmit block is used for sending from the first content data of the described encryption of described first storage component through described communication line and gives described data recording equipment;

Receiving-member is used to receive the content designator that sends from described data recording equipment, perhaps at least one the first content data of the described encryption of returning from described data recording equipment;

Second storage component is used to store the described content designator that is received by described receiving-member;

Matching block, be used for when the first content data of described encryption are returned from described data recording equipment, make described receiving-member remove to receive described content designator corresponding to the first content data of described encryption, described matching block further mates the content designator of this reception with respect to the described content designator that is stored in the described second storage component; And

Control assembly is used for the result according to described coupling, allows or forbids that the first content data of described encryption return from the described of described data recording equipment.

12. a data communication system comprises:

A data link comprises the first storage component of the first content data that are used for storage encryption and is used for sending from described first storage component the transmit block of the first content data of this encryption; And

A data tape deck comprises: first receiving-member that is used to receive the first content data of the described encryption that the described transmit block by described data link sends; Be used to decipher the deciphering parts of the first content data of the described encryption that receives by described receiving-member; Be used to receive second receiving-member of unencrypted second content data; And being used for writing down selectively the unencrypted second content data that receive by the described first content data of described deciphering parts deciphering or by described second receiving-member recording-member to the program area of described storage medium, the described recording-member further identifier of the described first content data of sign of record or described second content data arrives the directorial area of described storage medium;

Wherein said data recording equipment further comprises:

The content designator production part is used for producing a content designator based on the part first content data of the described deciphering in the described program area that is recorded in described storage medium; And

Transmit block is used to send to the described content designator that described data link is produced by described content designator production part; And

Wherein said data link further comprises:

Second storage component is used to store the described content designator by the described transmit block transmission of described data recording equipment;

Receiving-member will be when the first content data of described deciphering will return to described data link from the described storage medium of described data recording equipment, corresponding to described this content designator of first content Data Receiving that will return;

Matching block is used for the described content designator that is received by described receiving-member with respect to the described content designator coupling that is stored in described second storage component; And

Control assembly is used for according to the result by the coupling of described matching block, allows or forbids that the first content data of described encryption return from the described of described data recording equipment.

13. data communication system according to claim 12, wherein said data recording equipment further comprises control assembly, be presented an order that is used for the described content-data of reference record in the described program area of described storage medium, described control assembly is according to the described identifier in the described directorial area that is recorded in described storage medium, allow or forbid that the editor of recorded content data, described identifier identify described first content data or described second content data.

14. according to the data communication system of claim 12, wherein said data recording equipment further comprises:

Decision means, be presented an order that is used for the described content-data of reference record in the described program area of described storage medium, described decision means is based on the described identifier in the described directorial area that is recorded in described storage medium, this content-data that judgement will be edited is described first content data or described second content data, and described identifier identifies described first content data or described second content data; And

The announcement parts, if describedly will be judged it will be described first content data by described decision means by the content edited data, announcement is returned described first content data for described data link and will be become impossible after editor.

15. data communication system according to claim 14, wherein, if after announcement by described announcement parts, the user adheres to that the executive editor orders, so described control assembly allows the described first content data of editor, and changes described first identifier corresponding to this editor's first content data in view of the above.

16. according to the data communication system of claim 13, wherein said edit commands is specified about in operation splitting, combination operation and the erase operation of the content-data of described record at least one.

17. according to the data communication system of claim 14, wherein said edit commands is specified about in operation splitting, combination operation and the erase operation of the content-data of described record at least one.

18. data communication system according to claim 12, wherein, to turn back to described data link if be recorded in the first content data of the described deciphering in the described program area of described storage medium, so according to by the matching result of described matching block, described control assembly allows or forbids the returning of first content data of described deciphering; Wherein, if being judged as, the first content data of the described deciphering of returning edit, so described control assembly is not according to the described result of described coupling, but abide by described first identifier in the described directorial area be recorded in described storage medium, allow or forbid that the described of described first content data returns.

19. editing control method, be used for receiving selectively first content data when when data link transmits, being transfused to encryption, perhaps import unencrypted second content data, give the program area of storage medium for the unencrypted data that write down described reception, write down a directorial area of giving described storage medium corresponding to the identifier of these recorded content data simultaneously, described identifier identifies described first content data or described second content data, the described content-data that is recorded in whereby in the described program area of described storage medium is edited, and described editing control method may further comprise the steps:

Described identifier from described directorial area regeneration described first content data of sign or described second content data;

According to the identifier of this regeneration, be presented an order that is used for the described content-data of reference record in described program area, the content-data of judging described record is described first content data or described second content data; And

If the described content-data that will be edited in the described program area of described storage medium is judged it is described first content data in described determining step, then forbid or limit described editor.

20. according to the editing control method of claim 19, wherein said edit commands is specified about in operation splitting, combination operation and the erase operation of the content-data of described record at least one.

21. editing control method according to claim 19, further comprise step, if the content edited data are judged at described determining step is described first content data, announces so after editor, returns described first content data and will become impossible for described data link.

22. editing control method according to claim 21, further comprise step, if after the announcement of described announcement phase, the user adheres to that the executive editor orders, allow the described first content data of editor so, and the mode that changes described identifier with the first content data corresponding to described editor is simultaneously upgraded the described directorial area of described storage medium.

23. a data processing method is used for through a communication line that connects two parts content data encrypted being exchanged between data link and data recording equipment, described data processing method may further comprise the steps:

When described data link sends described content data encrypted to described data recording equipment, make described data link go to receive one and produce by described data recording equipment and from the content designator of its transmission;

Store in content designator to a memory of this reception;

When described data recording equipment will return described content data encrypted to described data link, judge whether that the described content data encrypted that will return is edited;

If described content data encrypted is judged as at described determining step edited, then forbidden returning described content data encrypted;

If described content data encrypted is judged as at described determining step and is not edited, will mate with the content designator that is stored in the described memory corresponding to the described content designator of the described content data encrypted that will be returned; And

If in described coupling step, show coupling, then allow to return described content data encrypted.